Description
A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software and consuming available system resources.
For a description of this vulnerability, see the ClamAV blog .
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco Secure Endpoint | 6.0.9, 6.0.7, 6.1.5, 6.1.7, 6.1.9, 6.2.1, 6.2.5, 6.2.19, 6.2.3, 6.2.9, 6.3.5, 6.3.1, 6.3.7, 6.3.3, 7.0.5, 7.1.1, 7.1.5, 7.2.13, 7.2.7, 7.2.3, 7.2.11, 7.2.5, 7.3.1, 7.3.9, 7.3.3, 7.3.5, 8.1.7, 8.1.5, 8.1.3.21242, 8.1.7.21512, 8.1.3, 8.1.5.21322, 8.1.7.21417 | — |
| Cisco | Cisco Secure Endpoint Private Cloud Administration Portal | N/A | — |
| Cisco | Cisco Secure Endpoint Private Cloud Console | N/A | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | clamav | 1.0.5+dfsg-1 | — |
| Debian 13 | clamav | 1.0.5+dfsg-1 | — |
| Debian 12 | clamav | 1.0.5+dfsg-1~deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | clamav | 1.0.5+dfsg-1ubuntu1 | — |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | clamav | 1.2.2-r0 | — |
| Alpine v3.23 | clamav | 1.2.2-r0 | — |
| Alpine v3.22 | clamav | 1.2.2-r0 | — |
| Alpine v3.21 | clamav | 1.2.2-r0 | — |
| Alpine v3.20 | clamav | 1.2.2-r0 | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | clamav | 1.2.2-r0 | — |
Advisories 1
- WID-SEC-2024-0322 ClamAV: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 8, 2025