Skip to content
OpenAdvisories

Package · Debian

clamav

169 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-20031

    ClamAV CSS Image Parsing Error Handling Denial of Service Vulnerability

    A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when splitting U…

    Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2025-20234

    ClamAV UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

    A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An…

    Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu
  • Medium 5.3
    CVE-2025-20128

    ClamAV OLE2 File Format Decryption Denial of Service Vulnerability

    A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer underflow in …

    Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2024-20506

    ClamAV Privilege Handling Escalation Vulnerability

    A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an authe…

    Cisco ClamAV clamav clamav Network devices Debian Ubuntu Alpine
  • Medium 4.0
    CVE-2024-20505

    ClamAV Memory Handling DoS

    A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthe…

    Cisco ClamAV clamav clamav Network devices Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2024-20328 EPSS 85%

    ClamAV VirusEvent File Processing Command Injection Vulnerability

    A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this…

    Cisco ClamAV clamav clamav Network devices Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2023-20052 Public exploit

    On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG f…

    Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2022-20796

    ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022

    On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authentica…

    Cisco Cisco AMP for Endpoints clamav clamav Network devices Debian Ubuntu Alpine
  • Medium 5.5
    CVE-2020-3350

    Cisco AMP for Endpoints and ClamAV Privilege Escalation Vulnerability

    A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the system. The vulnerability is due to a race condition that could …

    Cisco Cisco AMP for Endpoints clamav clamav Network devices Debian Ubuntu Alpine