https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 19:34:02 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01085 bdu:2024-01085 https://cve.radiocsirt.org/vuln/bdu:2024-01085 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0103 certfr-2024-avi-0103 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0103 https://cve.radiocsirt.org/vuln/cisco-sa-clamav-hdffu6t <p>A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog [&#34;https://blog.clamav.net/2023/11/clamav-130-122-105-released.html&#34;]. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog [&#34;https://blog.clamav.net/2023/11/clamav-130-122-105-released.html&#34;]. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-clamav-hdffu6t https://cve.radiocsirt.org/vuln/cleanstart-2026-df20774 <p><strong>Affected:</strong> CleanStart: clamav</p> <p>Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: clamav</p> <p>Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-df20774 https://cve.radiocsirt.org/vuln/cnvd-2024-41622 cnvd-2024-41622 https://cve.radiocsirt.org/vuln/cnvd-2024-41622 https://cve.radiocsirt.org/vuln/euvd-2026-217137 EUVD-2026-217137 https://cve.radiocsirt.org/vuln/euvd-2026-217137 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20290 <p>A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .</p> <p>A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20290 https://cve.radiocsirt.org/vuln/ghsa-xcpx-h22f-m42v <p>A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.</p> <p>This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software and consuming available system resources.</p> <p>For a description of this vulnerability, see the ClamAV blog .</p> <p>A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.</p> <p>This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software and consuming available system resources.</p> <p>For a description of this vulnerability, see the ClamAV blog .</p> https://cve.radiocsirt.org/vuln/ghsa-xcpx-h22f-m42v https://cve.radiocsirt.org/vuln/gsd-2024-20290 gsd-2024-20290 https://cve.radiocsirt.org/vuln/gsd-2024-20290 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-20290 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: clamav</p> <p>A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: clamav</p> <p>A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-20290 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0322 <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in ClamAV ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder beliebigen Code auszuführen.</p> <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in ClamAV ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0322