Vulnerabilities > Clamav
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-07-20 | CVE-2020-3481 | Null Pointer Dereference vulnerability in Clamav A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. | 5.0 |
| 2020-02-05 | CVE-2020-3123 | Out-Of-Bounds Read vulnerability in Clamav 0.102.0/0.102.1 A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software versions 0.102.1 and 0.102.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. | 5.0 |
| 2020-01-15 | CVE-2019-15961 | Resource Exhaustion vulnerability in multiple products A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. | 7.1 |
| 2019-11-15 | CVE-2013-7089 | Information Exposure vulnerability in multiple products ClamAV before 0.97.7: dbg_printhex possible information leak | 5.0 |
| 2019-11-15 | CVE-2013-7088 | Classic Buffer Overflow vulnerability in multiple products ClamAV before 0.97.7 has buffer overflow in the libclamav component | 7.5 |
| 2019-11-15 | CVE-2013-7087 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products ClamAV before 0.97.7 has WWPack corrupt heap memory | 7.5 |
| 2019-11-07 | CVE-2007-6745 | clamav 0.91.2 suffers from a floating point exception when using ScanOLE2. | 7.5 |
| 2019-11-06 | CVE-2007-0899 | Out-Of-Bounds Write vulnerability in multiple products There is a possible heap overflow in libclamav/fsg.c before 0.100.0. | 7.5 |
| 2019-11-05 | CVE-2019-1789 | Out-Of-Bounds Read vulnerability in Clamav ClamAV versions prior to 0.101.2 are susceptible to a denial of service (DoS) vulnerability. | 5.0 |
| 2019-11-05 | CVE-2019-12625 | Improper Resource Shutdown OR Release vulnerability in Clamav ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service condition by sending crafted messages to an affected system. | 5.0 |