ClamAV 0.102.1
Approved changes feed: RSS · Atom
cpe:2.3:a:clamav:clamav:0.102.1:*:*:*:*:*:*:*
part: a version: 0.102.1 update: *
| Vendor | Clamav (1e757e73-0a07-5655-8f9d-e7b1c408ae90) |
|---|---|
| Product | Clamav (6bd50a90-3838-55b3-b790-e75ee7286993) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/clamav |
purl2cpe | 2026-06-01 10:12:02.633216 |
pkg:deb/ubuntu/clamav |
purl2cpe | 2026-06-01 10:12:02.633217 |
pkg:docker/clamav/clamav |
purl2cpe | 2026-06-01 10:12:02.633218 |
pkg:github/cisco-talos/clamav |
purl2cpe | 2026-06-01 10:12:02.633220 |
pkg:rpm/fedora/clamav |
purl2cpe | 2026-06-01 10:12:02.633221 |
pkg:rpm/opensuse/clamav |
purl2cpe | 2026-06-01 10:12:02.633222 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-3123 |
vulnerable | 2026-06-08 05:25:50.738975 |
Details available
HIGH (7.5)
A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software versions 0.102.1 and 0.102.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to an out-of-bounds read affecting users that have enabled the optional DLP feature. An attacker could exploit this vulnerability by sending a crafted email file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.
Published: 2020-02-05T17:30:20.755Z
Updated: 2024-11-15T17:43:05.687Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.