clamav vulnerabilities

Known vulnerabilities in the clamav package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
C Heap-based Buffer Overflow	<1.4.3-r0
H Out-of-bounds Read	<1.3.2-r0
M Improper Check for Unusual or Exceptional Conditions	<1.3.2-r0
C Out-of-bounds Write	<1.0.1-r0
M Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<1.0.1-r0
H Use After Free	<0.99.3-r0
C Out-of-Bounds	<0.99.3-r0
C Integer Overflow or Wraparound	<0.99.4-r0
H Out-of-Bounds	<0.99.4-r0
M Out-of-bounds Read	<0.100.3-r0
H Out-of-bounds Read	<0.100.3-r0
H Improper Input Validation	<0.103.2-r0
M Out-of-bounds Read	<0.100.2-r0
M Race Condition	<0.102.4-r0
L Improper Input Validation	<0.100.1-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0.100.1-r0
H Off-by-one Error	<0.100.2-r0
M Heap-based Buffer Overflow	<1.4.2-r0
H Link Following	<1.2.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.1.1-r0
M Out-of-bounds Read	<0.99.4-r0
H Out-of-Bounds	<0.99.3-r0
H Out-of-Bounds	<0.99.3-r0
M Out-of-bounds Read	<0.99.3-r0
L CVE-2024-20328	<1.2.2-r0
H Out-of-bounds Read	<1.2.2-r0
M Out-of-bounds Read	<0.99.4-r0
H Improper Input Validation	<0.103.2-r0
M Out-of-bounds Read	<0.99.4-r0
H Out-of-bounds Read	<0.104.2-r0
C Out-of-bounds Read	<0.99.3-r0
H NULL Pointer Dereference	<0.99.3-r0
H NULL Pointer Dereference	<0.102.4-r0
H Improper Input Validation	<0.102.3-r0
H Out-of-bounds Read	<0.102.1-r0
H Improper Input Validation	<0.102.3-r0
H Buffer Overflow	<0.103.2-r0
H Out-of-bounds Write	<0.100.2-r0
M Resource Exhaustion	<0.102.0-r0
M Improper Input Validation	<0.100.2-r0
M Integer Overflow or Wraparound	<0.100.1-r0
H Improper Resource Shutdown or Release	<0.101.4-r0
M Out-of-bounds Write	<0.100.3-r0

Vulnerability

Vulnerable Version

Heap-based Buffer Overflow

<1.4.3-r0

Out-of-bounds Read

<1.3.2-r0

Improper Check for Unusual or Exceptional Conditions

<1.3.2-r0

Out-of-bounds Write

<1.0.1-r0

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

<1.0.1-r0