EUVD-2008-1833

Malware in sbrugna...

EUVD-2017-15477

Malware in sbrugna...

EUVD-2024-18221

Malicious code in bioql PyPI...

EUVD-2025-2155

Malicious code in bioql PyPI...

EUVD-2023-24391

Malicious code in bioql PyPI...

Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : ClamAV vulnerabilities (USN-7615-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7615-1 advisory. It was discovered that ClamAV incorrectly handled scanning UDF files. A remote attacker could possibly use this issue to caus...

Cisco Secure Endpoint ClamAV DoS (cisco-sa-clamav-udf-hmwd9nDy)

According to its self-reported version, Cisco Secure Endpoint Connector for ClamAV is affected by a vulnerability. - A vulnerability in Universal Disk Format UDF processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device...

FreeBSD : clamav -- ClamAV UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (6c6c1507-4da5-11f0-afcc-f02f7432cf97)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6c6c1507-4da5-11f0-afcc-f02f7432cf97 advisory. Cisco reports: A vulnerability in Universal Disk Format UDF processing of ClamAV could allow an...

CVE-2025-20234

A vulnerability has been discovered in ClamAV related to its processing of Universal Disk Format UDF files. This flaw involves a memory over-read that can lead to a crash of the ClamAV scanning process. Given that ClamAV is frequently used to scan untrusted input received over a network for...

CVE-2018-20873

cPanel before 74.0.8 allows local users to disable the ClamAV daemon SEC-409...

FreeBSD : clamav -- Possbile denial-of-service vulnerability (1e109b60-d92e-11ef-a661-08002784c58d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1e109b60-d92e-11ef-a661-08002784c58d advisory. The ClamAV project reports: A possible buffer overflow read bug is found in the OLE2 file parser that...

CVE-2025-20128

A vulnerability in the Object Linking and Embedding 2 OLE2 decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an integer underflow in a bounds check that allows for a heap buff...

PT-2022-36704 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: cli ole2 extract, cli scanole2, and cli magic scan. No...

CVE-2011-1003

Double free vulnerability in the vbareadprojectstrings function in vbaextract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications VBA data in a Microsoft Office document. NOTE: some of these details are obtained fro...

CVE-2009-1241

Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive...

CVE-2007-6337

Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlibprivate.h in ClamAV before 0.92 has unknown impact and remote attack vectors...

CVE-2007-0898

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. dot dot in the id MIME header parameter in a multi-part message...