Description
Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | clamav | 0.97.2+dfsg-1 | — |
| Debian 13 | clamav | 0.97.2+dfsg-1 | — |
| Debian 12 | clamav | 0.97.2+dfsg-1 | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | clamav | 0.99.2-4.1 | openSUSE-SU-2024:10571-1 |
Advisories 1
- openSUSE-SU-2024:10571-1 clamav-0.99.2-4.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 45382 third-party-advisory
- FEDORA-2011-15033 vendor-advisory
- http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.97.2
- 1025858 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=725694
- USN-1179-1 vendor-advisory
- https://bugzilla.novell.com/show_bug.cgi?id=708263
- 46717 third-party-advisory
- [oss-security] 20110726 CVE Request -- Clam AntiVirus -- v0.97.2 -- Off-by-one error by scanning message hashes mailing-list
- clamav-scan-dos(68785) vdb-entry
- http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commit%3Bh=4842733eb3f09be61caeed83778bb6679141dbc5
- FEDORA-2011-15076 vendor-advisory
- FEDORA-2011-15119 vendor-advisory
- [oss-security] 20110726 Re: CVE Request -- Clam AntiVirus -- v0.97.2 -- Off-by-one error by scanning message hashes mailing-list
- 48891 vdb-entry
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2818
- 74181 vdb-entry
- MDVSA-2011:122 vendor-advisory