Medium WID-SEC-2026-2173 7 CVEs

ClamAV: Mehrere Schwachstellen

Published Jul 1, 2026 · Updated Oct 22, 2026 · Revision 8 · de-DE

Vendor: amazon Vendor: Cisco Vendor: Debian Vendor: Microsoft Vendor: SUSE Vendor: Ubuntu Product: Azure Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openSUSE Product: Secure Endpoint Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ClamAV ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.

Product

ClamAV ist ein Open Source Virenscanner.

Vulnerabilities 7

High 7.5

CVE-2026-20213

ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability

A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper …

Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Azure Linux Alpine

Jul 1, 2026
High 7.5

CVE-2026-20214

ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability

A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper…

Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Azure Linux Alpine

Jul 1, 2026
High 7.5

CVE-2026-20215

ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability

A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper …

Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Azure Linux Alpine

Jul 1, 2026
High 7.5

CVE-2026-20216

ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of temporary resources during file scanning. An at…

Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Azure Linux Alpine

Jul 1, 2026
High 7.5

CVE-2026-20217 Public exploit

ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to impro…

Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Azure Linux Alpine

Jul 1, 2026
High 7.5

CVE-2026-20243

ClamAV ALZ Archive Processing Denial of Service Vulnerability

A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper…

Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Azure Linux Alpine

Jul 1, 2026
High 7.5

CVE-2026-20244

ClamAV DMG File Processing Denial of Service Vulnerability

A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper…

Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Alpine

Jul 1, 2026

Revision history

2026-10-22 #8
Neue Updates von Debian aufgenommen
2026-09-16 #7
Neue Updates von SUSE aufgenommen
2026-07-21 #6
Neue Updates von Amazon aufgenommen
2026-07-14 #5
Neue Updates von SUSE aufgenommen
2026-07-09 #4
Neue Updates von SUSE aufgenommen
2026-07-08 #3
Neue Updates von Ubuntu und openSUSE aufgenommen
2026-07-02 #2
Neue Updates von Cisco aufgenommen
2026-07-01 #1
Initiale Fassung

References

Cisco Security Advisory CISCO-SA-CLAMAV-88CFYYXR vom 2026-07-01
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR
ClamAV 1.5.3 and 1.4.5 security patch vom 2026-07-01
https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
Ubuntu Security Notice USN-8517-1 vom 2026-07-08
https://ubuntu.com/security/notices/USN-8517-1
openSUSE Security Update OPENSUSE-SU-2026:21252-1 vom 2026-07-08
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/USIVXY3F7PXE7LTUA5CYR5NA5QPVWFLL/
SUSE Security Update SUSE-SU-2026:2835-1 vom 2026-07-10
https://lists.suse.com/pipermail/sle-security-updates/2026-July/027339.html
SUSE Security Update SUSE-SU-2026:2834-1 vom 2026-07-10
https://lists.suse.com/pipermail/sle-security-updates/2026-July/027340.html
SUSE Security Update SUSE-SU-2026:2833-1 vom 2026-07-10
https://lists.suse.com/pipermail/sle-security-updates/2026-July/027341.html
SUSE Security Update SUSE-SU-2026:22574-1 vom 2026-07-14
https://lists.suse.com/pipermail/sle-security-updates/2026-July/027441.html
Microsoft Leitfaden für Sicherheitsupdates vom 2026-07-14
https://msrc.microsoft.com/update-guide/
Amazon Linux Security Advisory ALAS2-2026-3820 vom 2026-07-21
https://alas.aws.amazon.com/AL2/ALAS2-2026-3820.html
SUSE Security Update SUSE-SU-2026:2834-2 vom 2026-09-16
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029041.html
Debian Security Advisory DLA-4852 vom 2026-10-23
https://lists.debian.org/debian-lts-announce/2026/10/msg00046.html