ClamAV index_local_file_headers Heap Buffer Overflow DoS

The vulnerability of the indexlocalfileheaders function in the libclamav/unzip.c file of the ClamAV antivirus program is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

ClamAV index_local_file_headers_within_bounds() Code Execution

The vulnerability of the indexlocalfileheaderswithinbounds function in the libclamav/unzip.c file of the ClamAV antivirus program is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service failures...

PT-2026-70011

Уязвимость функции index local file headers within bounds файла libclamav/unzip.c пакета антивирусных программ ClamAV связана с записью за границами буфера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код и вызвать отказ в обслуживании...

PT-2026-70009

Уязвимость функции index local file headers файла libclamav/unzip.c пакета антивирусных программ ClamAV связана с ошибкой повторного освобождения памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

CLSA-2026-1784210640 Fix CVE(s): CVE-2026-20215, CVE-2026-20216, CVE-2026-20217

SECURITY UPDATE: Out-of-bounds write via 7z substream count overflow - debian/patches/CVE-2026-20215.patch: reject 7z archives whose total unpack-stream count would overflow UInt32 before it is accumulated in libclamav/7z/7zIn.c - CVE-2026-20215 SECURITY UPDATE: Denial of service via InstallShiel...

CLSA-2026-1784110349 Fix CVE(s): CVE-2026-20213, CVE-2026-20214, CVE-2026-20244

SECURITY UPDATE: Out-of-bounds write in the PE rebuilder via crafted Aspack files - debian/patches/CVE-2026-20213.patch: sum rebuilt section sizes in a 64-bit accumulator and reject allocations larger than CLIMAXALLOCATION in libclamav/rebuildpe.c - CVE-2026-20213 SECURITY UPDATE: Out-of-bounds...

EUVD-2005-2451

Malware in sbrugna...

EUVD-2013-6874

Malware in sbrugna...

EUVD-2007-0895

Malware in sbrugna...

Debian: Security Advisory (DLA-437-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-95-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2006-1630

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

SUSE CVE-2007-0899

There is a possible heap overflow in libclamav/fsg.c before 0.100.0...

SUSE CVE-2007-6335

Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow...

SUSE CVE-2008-0728

The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."...

SUSE CVE-2008-1833

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...

SUSE CVE-2008-1836

The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read...

SUSE CVE-2008-3912

libclamav in ClamAV before 0.94 allows attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an out-of-memory condition...

SUSE CVE-2010-3434

Buffer overflow in the findstreambounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document. NOTE: some of these details are obtained from third party informatio...

SUSE CVE-2010-4479

Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document, aka "bb 2380," a different vulnerability than CVE-2010-4260...