libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-clamav | Feb 22, 2018 | Aug 6, 2017 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Aug 7, 2017 | |
| Debian | debian-upgrade-clamav | Feb 25, 2019 | Aug 6, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-app-antivirus-clamav | Apr 23, 2018 | Aug 6, 2017 | |
| Suse | — | suse-upgrade-clamavsuse-upgrade-clamav-develsuse-upgrade-libclamav7suse-upgrade-libclamav9suse-upgrade-libclammspack0suse-upgrade-libfreshclam2 | Jan 30, 2018 | Aug 6, 2017 |
| Ubuntu | ubuntu-upgrade-clamav | Aug 17, 2017 | Aug 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub