clamav vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the clamav package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • M
Improper Check for Unusual or Exceptional Conditions

<1.4.1+dfsg-1
  • H
Out-of-bounds Read

<1.0.5+dfsg-1
  • H
NULL Pointer Dereference

<0.102.4+dfsg-1
  • H
Out-of-Bounds

<0.99.3~beta2+dfsg-1
  • L
Out-of-bounds Read

<0.99.3~beta1+dfsg-1
  • M
Resource Management Errors

<0.98.7+dfsg-1
  • L
Access Restriction Bypass

<0.97.5+dfsg-1
  • L
Access Restriction Bypass

<0.97.5+dfsg-1
  • H
Numeric Errors

<0.96.5+dfsg-1
  • M
Resource Management Errors

<0.98.7+dfsg-1
  • H
Directory Traversal

<0.101.2+dfsg-1
  • M
Numeric Errors

<0.97.8+dfsg-1
  • M
Improper Input Validation

<0.95.1+dfsg-1
  • L
CVE-2009-3736

<0.95+dfsg-1
  • M
Integer Overflow or Wraparound

<0.100.1+dfsg-1
  • H
Out-of-Bounds

<0.98.6+dfsg-1
  • M
Out-of-bounds Read

<0.99.3~beta1+dfsg-1
  • M
Out-of-bounds Read

<0.99.3~beta1+dfsg-1
  • H
Out-of-Bounds

<0.99.3~beta2+dfsg-1
  • H
Use After Free

<0.99.3~beta2+dfsg-1
  • C
Out-of-bounds Write

<1.0.1+dfsg-1
  • M
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

<1.0.1+dfsg-1
  • M
Out-of-Bounds

<0.97.8+dfsg-1
  • L
Improper Input Validation

<0.92.1~dfsg-1
  • L
Access Restriction Bypass

<0.97.5+dfsg-1
  • M
Out-of-Bounds

<0.92~dfsg-1~volatile2
  • H
CVE-2010-4479

<0.96.5+dfsg-1
  • H
Heap-based Buffer Overflow

<1.4.2+dfsg-1
  • H
Out-of-bounds Read

<0.102.2+dfsg-1
  • L
Resource Management Errors

<0.90.2-1
  • H
Improper Input Validation

<0.103.2+dfsg-1
  • H
Out-of-bounds Read

<1.4.1+dfsg-1
  • M
Arbitrary Code Injection

<0.95.1+dfsg-1
  • C
Out-of-bounds Write

<0.101.4+dfsg-1
  • C
Out-of-bounds Write

<0.90-1
  • C
Heap-based Buffer Overflow

<1.4.3+dfsg-1
  • H
CVE-2007-0897

<0.90-1
  • H
CVE-2023-20212

<1.0.2+dfsg-1
  • H
Out-of-bounds Read

<0.103.5+dfsg-1
  • M
NULL Pointer Dereference

<0.103.6+dfsg-1
  • H
Memory Leak

<0.103.6+dfsg-1
  • L
Out-of-Bounds

<0.99.3~beta1+dfsg-1
  • C
Information Exposure

<0.94.dfsg-1
  • M
Out-of-bounds Write

<0.101.2+dfsg-1
  • H
NULL Pointer Dereference

<0.99.3~beta2+dfsg-1
  • M
CVE-2005-3500

<0.87.1-1
  • M
Out-of-bounds Read

<0.100.0~beta+dfsg-2
  • M
Numeric Errors

<0.95.1+dfsg-1
  • M
CVE-2005-2920

<0.87-1
  • M
Race Condition

<0.102.4+dfsg-1
  • M
CVE-2006-1614

<0.88.1-1
  • M
Resource Management Errors

<0.94.dfsg-1
  • C
CVE-2007-6745

<0.91.2-1~volatile1
  • H
Improper Resource Shutdown or Release

<0.101.4+dfsg-1
  • H
Out-of-Bounds

<0.99+dfsg-1
  • H
OS Command Injection

<0.91.2-1~volatile1
  • M
CVE-2007-3122

<0.90.3-1
  • C
Buffer Overflow

<0.97.7+dfsg-1
  • L
Improper Input Validation

<0.100.1+dfsg-1
  • M
Improper Access Control

<0.99.2+dfsg-1
  • C
Out-of-Bounds

<0.99.3~beta2+dfsg-1
  • M
Resource Management Errors

<0.98.7+dfsg-1
  • L
Numeric Errors

<0.97.3+dfsg-1
  • M
Resource Management Errors

<0.98.7+dfsg-1
  • H
Out-of-Bounds

<0.96.3+dfsg-1
  • H
CVE-2006-5295

<0.88.5-1
  • M
CVE-2009-1241

<0.95+dfsg-1
  • H
Out-of-Bounds

<0.98.6+dfsg-1
  • L
Resource Management Errors

<0.97+dfsg-1
  • L
Numeric Errors

<0.98.7+dfsg-1
  • M
Memory Leak

<0.94.dfsg-1
  • H
CVE-2007-1997

<0.90.2-1
  • L
Resource Management Errors

<0.93.1.dfsg-1.1
  • M
CVE-2008-1387

<0.92.1~dfsg2-1
  • M
CVE-2005-2070

<0.86.1
  • C
CVE-2007-6337

<0.92~dfsg-1~volatile2
  • C
CVE-2010-0098

<0.96+dfsg-1
  • L
Access Restriction Bypass

<0.97.5+dfsg-1
  • L
Improper Input Validation

<0.96+dfsg-2
  • M
Resource Management Errors

<0.94.dfsg-1
  • H
Out-of-Bounds

<0.94.dfsg.1-1
  • M
CVE-2007-4510

<0.91.2-1~volatile1
  • M
CVE-2005-1923

<0.86.1
  • H
Buffer Overflow

<0.103.2+dfsg-1
  • H
Out-of-bounds Write

<0.103.6+dfsg-1
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1.0.2+dfsg-1
  • C
Out-of-Bounds

<0.92.1~dfsg2-1
  • M
Out-of-bounds Read

<0.101.2+dfsg-1
  • C
CVE-2007-3023

<0.90.3-1
  • L
CVE-2006-6481

<0.88.7-1
  • M
Out-of-Bounds

<0.92.1~dfsg2-1.1
  • H
Out-of-bounds Read

<1.4.3+dfsg-1
  • H
Numeric Errors

<0.92~dfsg-1~volatile2
  • H
Improper Input Validation

<0.102.3+dfsg-1
  • H
Out-of-bounds Read

<0.101.2+dfsg-1
  • L
CVE-2024-20328

<1.0.5+dfsg-1
  • H
CVE-2003-0946

<0.65
  • M
CVE-2005-3587

<0.87.1-1
  • M
CVE-2007-3123

<0.90.3-1
  • M
Out-of-bounds Read

<0.99.3~beta2+dfsg-1
  • H
CVE-2022-20770

<0.103.6+dfsg-1
  • H
Improper Input Validation

<0.103.2+dfsg-1
  • H
CVE-2022-20771

<0.103.6+dfsg-1
  • M
Out-of-bounds Read

<0.101.2+dfsg-1
  • H
CVE-2006-4182

<0.88.5-1
  • M
Improper Access Control

<0.99.2+dfsg-1
  • H
CVE-2006-0162

<0.88-1
  • M
Use After Free

<0.99.3~beta1+dfsg-1
  • M
CVE-2004-0270

<0.80
  • C
Resource Management Errors

<0.92.1~dfsg-1
  • M
Out-of-bounds Read

<0.101.2+dfsg-1
  • M
Resource Exhaustion

<0.102.1+dfsg-1
  • M
Code

<0.98.5+dfsg-1
  • L
CVE-2005-1922

<0.86.1-1
  • C
Out-of-bounds Read

<0.99.3~beta2+dfsg-1
  • M
CVE-2004-1876

<0.70-1
  • H
Improper Input Validation

<0.102.4+dfsg-1
  • L
CVE-2004-1909

<0.68.1
  • M
Resource Management Errors

<0.87-1
  • M
CVE-2010-1639

<0.96.1+dfsg-1
  • H
Out-of-Bounds

<0.98.6+dfsg-1
  • M
Out-of-bounds Read

<0.100.2+dfsg-1
  • C
Out-of-Bounds

<0.95.1+dfsg-1
  • M
CVE-2005-2450

<0.86.2-1
  • M
Code

<0.98.6+dfsg-1
  • M
Resource Management Errors

<0.94.dfsg.2-1
  • M
CVE-2006-5874

<0.86-1
  • M
Out-of-Bounds

<0.98.5+dfsg-1
  • M
CVE-2010-4260

<0.96.5+dfsg-1
  • C
Out-of-Bounds

<0.97.7+dfsg-1
  • M
Numeric Errors

<0.92.1~dfsg-1
  • H
Information Exposure

<0.97.7+dfsg-1
  • M
Out-of-Bounds

<0.92.1~dfsg2-1
  • M
Numeric Errors

<0.96.3+dfsg-1
  • M
CVE-2007-3024

<0.90.3-1
  • M
CVE-2007-3725

<0.91-1
  • M
Directory Traversal

<0.90-1
  • M
Numeric Errors

<0.96.1+dfsg-1
  • M
Resource Management Errors

<0.93.1.dfsg-1.1
  • C
Use of Externally-Controlled Format String

<0.88.1-1
  • M
CVE-2006-1989

<0.88.2
  • H
Out-of-Bounds

<0.88.4-1
  • M
CVE-2008-6845

<0.94.dfsg-1
  • M
CVE-2005-3239

<0.87.1-1
  • M
Resource Exhaustion

<0.90.2-1
  • M
CVE-2006-6406

<0.88.7-1
  • M
Numeric Errors

<0.97.2+dfsg-1
  • H
CVE-2005-3303

<0.87.1-1
  • H
CVE-2007-1745

<0.90.2-1
  • M
CVE-2005-0218

<0.81
  • M
CVE-2005-2056

<0.86.1-1
  • M
Resource Management Errors

<0.87.1-1
  • M
CVE-2006-1630

<0.88.1-1
  • M
CVE-2005-0133

<0.80-0.81rc1-1
  • L
Link Following

<0.92.1~dfsg-1