https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:14:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-04766 bdu:2023-04766 https://cve.radiocsirt.org/vuln/bdu:2023-04766 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0658 certfr-2023-avi-0658 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0658 https://cve.radiocsirt.org/vuln/cisco-sa-clamav-rnwneeee <p>A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog [&#34;https://blog.clamav.net/2023/07/2023-08-16-releases.html&#34;]. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog [&#34;https://blog.clamav.net/2023/07/2023-08-16-releases.html&#34;]. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-clamav-rnwneeee https://cve.radiocsirt.org/vuln/cleanstart-2026-la13761 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: clamav</p> <p>Multiple security vulnerabilities affect the clamav package. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: clamav</p> <p>Multiple security vulnerabilities affect the clamav package. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-la13761 https://cve.radiocsirt.org/vuln/euvd-2026-7944 EUVD-2026-7944 https://cve.radiocsirt.org/vuln/euvd-2026-7944 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20197 <p>A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .</p> <p>A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-20197 https://cve.radiocsirt.org/vuln/ghsa-r7mw-p665-4533 <p>A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.</p> <p>This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources.</p> <p>For a description of this vulnerability, see the ClamAV blog .</p> <p>A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.</p> <p>This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources.</p> <p>For a description of this vulnerability, see the ClamAV blog .</p> https://cve.radiocsirt.org/vuln/ghsa-r7mw-p665-4533 https://cve.radiocsirt.org/vuln/gsd-2023-20197 gsd-2023-20197 https://cve.radiocsirt.org/vuln/gsd-2023-20197 https://cve.radiocsirt.org/vuln/oesa-2023-1540 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP2: clamav</p> <p>Clam AntiVirus (clamav) is an open source antivirus engine for detecting trojans, viruses, malware &amp;amp; other malicious threats. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. he virus database is based on the virus database from OpenAntiVirus, but contains additional signatures and is KEPT UP TO DATE.</p> <p>Security Fix(es):</p> <p>A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.</p> <p>This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources.</p> <p>For a description of this vulnerability, see the ClamAV blog .(CVE-2023-20197)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP2: clamav</p> <p>Clam AntiVirus (clamav) is an open source antivirus engine for detecting trojans, viruses, malware &amp;amp; other malicious threats. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. he virus database is based on the virus database from OpenAntiVirus, but contains additional signatures and is KEPT UP TO DATE.</p> <p>Security Fix(es):</p> <p>A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.</p> <p>This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources.</p> <p>For a description of this vulnerability, see the ClamAV blog .(CVE-2023-20197)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1540 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13174-1 <p>clamav-0.103.9-1.1 on GA media</p> <p>clamav-0.103.9-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13174-1 https://cve.radiocsirt.org/vuln/suse-su-2023:3435-1 <p>Security update for clamav</p> <p>Security update for clamav</p> https://cve.radiocsirt.org/vuln/suse-su-2023:3435-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-20197 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: clamav, Ubuntu:Pro:16.04:LTS: clamav, Ubuntu:Pro:18.04:LTS: clamav, Ubuntu:20.04:LTS: clamav, Ubuntu:22.04:LTS: clamav</p> <p>A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: clamav, Ubuntu:Pro:16.04:LTS: clamav, Ubuntu:Pro:18.04:LTS: clamav, Ubuntu:20.04:LTS: clamav, Ubuntu:22.04:LTS: clamav</p> <p>A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-20197 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2090 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ClamAV und Cisco Secure Endpoint ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ClamAV und Cisco Secure Endpoint ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2090