clamav

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the clamav package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Heap-based Buffer Overflow	<1.4.2-r0
H Link Following	<1.2.0-r0
C Out-of-bounds Write	<1.0.1-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.1.1-r0
H Out-of-bounds Read	<1.2.2-r0
M Out-of-bounds Read	<0.99.4-r0
C Integer Overflow or Wraparound	<0.99.4-r0
L CVE-2024-20328	<1.2.2-r0
M Out-of-bounds Read	<0.99.4-r0
M Out-of-bounds Read	<0.99.4-r0
H Out-of-Bounds	<0.99.3-r0
M Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<1.0.1-r0
C Out-of-Bounds	<0.99.3-r0
M Improper Check for Unusual or Exceptional Conditions	<1.3.2-r0
H Out-of-Bounds	<0.99.4-r0
H Out-of-bounds Read	<1.3.2-r0
H Out-of-Bounds	<0.99.3-r0
C Out-of-bounds Read	<0.99.3-r0
H Use After Free	<0.99.3-r0
H Improper Input Validation	<0.103.2-r0
H Improper Input Validation	<0.102.3-r0
H Out-of-bounds Write	<0.100.2-r0
M Out-of-bounds Read	<0.99.3-r0
H Buffer Overflow	<0.103.2-r0
H Out-of-bounds Read	<0.102.1-r0
H NULL Pointer Dereference	<0.99.3-r0
H Improper Input Validation	<0.102.3-r0
M Race Condition	<0.102.4-r0
L Improper Input Validation	<0.100.1-r0
M Integer Overflow or Wraparound	<0.100.1-r0
M Improper Input Validation	<0.100.2-r0
H Out-of-bounds Read	<0.104.2-r0
H Improper Input Validation	<0.103.2-r0
M Out-of-bounds Write	<0.100.3-r0
M Resource Exhaustion	<0.102.0-r0
H Out-of-bounds Read	<0.100.3-r0
M Out-of-bounds Read	<0.100.2-r0
H Off-by-one Error	<0.100.2-r0
H NULL Pointer Dereference	<0.102.4-r0
H Improper Resource Shutdown or Release	<0.101.4-r0
M Out-of-bounds Read	<0.100.3-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0.100.1-r0