High WID-SEC-2026-2708 7 CVEs

ClamAV: Mehrere Schwachstellen ermöglichen Denial of Service und Offenlegung von Informationen

Published Aug 9, 2026 · Updated Oct 22, 2026 · Revision 7 · de-DE

Vendor: amazon Vendor: Cisco Vendor: cPanel Vendor: Debian Vendor: SUSE Vendor: Ubuntu Product: cPanel/WHM Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: Secure Endpoint Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ClamAV ausnutzen, um einen Denial of Service Angriff durchzuführen und Informationen offenzulegen.

Product

ClamAV ist ein Open Source Virenscanner.

Vulnerabilities 7

High 7.5

CVE-2026-20337

ClamAV ZIP File Format Processing Memory Corruption Vulnerability

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper boundary checks for content in zip files during scanning, which may resul…

Cisco Cisco Secure Endpoint clamav clamav Network devices Ubuntu Azure Linux Wolfi

Aug 7, 2026
High 7.5

CVE-2026-20338

ClamAV ZIP File Format Processing Memory Corruption Vulnerability

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper memory handling when processing content in zip files during scanning. An …

Cisco Cisco Secure Endpoint clamav clamav Network devices Ubuntu Azure Linux Wolfi

Aug 7, 2026
High 7.5

CVE-2026-20339

ClamAV PESpin File Format Processing Integer Overflow Vulnerability

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to im…

Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Azure Linux Alpine Wolfi

Aug 7, 2026
High 7.5

CVE-2026-20345

ClamAV GPT File Format Processing Memory Corruption Vulnerability

A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to impro…

Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Azure Linux Alpine Wolfi

Aug 7, 2026
High 7.5

CVE-2026-20346

ClamAV PDF File Format Processing Memory Corruption Vulnerability

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to impro…

Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Azure Linux Alpine Wolfi

Aug 7, 2026
High 7.5

CVE-2026-20347

ClamAV Mach-O File Format Processing Memory Corruption Vulnerability

A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to im…

Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Azure Linux Alpine Wolfi

Aug 7, 2026
High 7.5

CVE-2026-20348

ClamAV XAR File Format Processing Memory Corruption Vulnerability

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to impro…

Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Azure Linux Alpine Wolfi

Aug 7, 2026

Revision history

2026-10-22 #7
Neue Updates von Debian aufgenommen
2026-09-21 #6
Neue Updates von Ubuntu aufgenommen
2026-09-16 #5
Neue Updates von SUSE aufgenommen
2026-08-31 #4
Neue Updates von Amazon aufgenommen
2026-08-17 #3
Neue Updates aufgenommen
2026-08-10 #2
PoC aufgenommen
2026-08-09 #1
Initiale Fassung

References

ClamAV Release Notes vom 2026-08-09
https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
Cisco Security Advisory cisco-sa-clamav-WuuvVd26 vom 2026-08-09
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26
cPanel 138 Change Log vom 2026-08-18
https://docs.cpanel.net/changelogs/138-change-log/
cPanel 136 Change Log vom 2026-08-18
https://docs.cpanel.net/changelogs/136-change-log/
cPanel 134 Change Log vom 2026-08-18
https://docs.cpanel.net/changelogs/134-change-log/
Amazon Linux Security Advisory ALAS2-2026-3894 vom 2026-09-01
https://alas.aws.amazon.com/AL2/ALAS2-2026-3894.html
SUSE Security Update SUSE-SU-2026:4208-1 vom 2026-09-16
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029196.html
SUSE Security Update SUSE-SU-2026:23727-1 vom 2026-09-16
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029166.html
SUSE Security Update SUSE-SU-2026:4179-1 vom 2026-09-16
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029148.html
SUSE Security Update SUSE-SU-2026:23706-1 vom 2026-09-16
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029179.html
SUSE Security Update SUSE-SU-2026:4180-1 vom 2026-09-16
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029147.html
Ubuntu Security Notice USN-8788-1 vom 2026-09-21
https://ubuntu.com/security/notices/USN-8788-1
Debian Security Advisory DLA-4852 vom 2026-10-23
https://lists.debian.org/debian-lts-announce/2026/10/msg00046.html