Approved changes feed: RSS · Atom

cpe:2.3:a:clamav:clamav:0.101.1:*:*:*:*:*:*:*

part: a version: 0.101.1 update: *

VendorClamav (1e757e73-0a07-5655-8f9d-e7b1c408ae90)
ProductClamav (6bd50a90-3838-55b3-b790-e75ee7286993)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/clamav purl2cpe 2026-06-01 10:12:02.633167
pkg:deb/ubuntu/clamav purl2cpe 2026-06-01 10:12:02.633169
pkg:docker/clamav/clamav purl2cpe 2026-06-01 10:12:02.633170
pkg:github/cisco-talos/clamav purl2cpe 2026-06-01 10:12:02.633171
pkg:rpm/fedora/clamav purl2cpe 2026-06-01 10:12:02.633173
pkg:rpm/opensuse/clamav purl2cpe 2026-06-01 10:12:02.633174

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-1786 vulnerable 2026-06-08 05:13:29.370200 Clam AntiVirus PDF Out-of-Bounds Read Vulnerability
HIGH (7.5)
A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of proper data handling mechanisms within the device buffer while indexing remaining file data on an affected device. An attacker could exploit this vulnerability by sending crafted PDF files to an affected device. A successful exploit could allow the attacker to cause an out-of-bounds read condition, resulting in a crash that could result in a denial of service condition on an affected device.
Published: 2019-04-08T19:05:14.000Z
Updated: 2024-11-19T19:12:41.510Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1785 vulnerable 2026-06-08 05:13:29.369526 Clam AntiVirus RAR Directory Traversal Vulnerability
CRITICAL (9.8)
A vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of proper error-handling mechanisms when processing nested RAR files sent to an affected device. An attacker could exploit this vulnerability by sending a crafted RAR file to an affected device. An exploit could allow the attacker to view or create arbitrary files on the targeted system.
Published: 2019-04-08T19:05:21.000Z
Updated: 2024-11-19T19:12:31.535Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.