ClamAV 0.103.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:clamav:clamav:0.103.0:*:*:*:*:*:*:*

part: a version: 0.103.0 update: *

VendorClamav (1e757e73-0a07-5655-8f9d-e7b1c408ae90)
ProductClamav (6bd50a90-3838-55b3-b790-e75ee7286993)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/clamav purl2cpe 2026-06-01 10:12:02.633248
pkg:deb/ubuntu/clamav purl2cpe 2026-06-01 10:12:02.633249
pkg:docker/clamav/clamav purl2cpe 2026-06-01 10:12:02.633250
pkg:github/cisco-talos/clamav purl2cpe 2026-06-01 10:12:02.633252
pkg:rpm/fedora/clamav purl2cpe 2026-06-01 10:12:02.633253
pkg:rpm/opensuse/clamav purl2cpe 2026-06-01 10:12:02.633254

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-1404 vulnerable 2026-06-08 05:28:14.195822 Clam AntiVirus (ClamAV) Email Parser Denial of Service Vulnerability
HIGH (7.5)
A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a heap buffer over-read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
Published: 2021-04-08T04:30:18.361Z
Updated: 2024-11-08T23:25:27.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-1252 vulnerable 2026-06-08 05:28:12.984625 Clam AntiVirus (ClamAV) Excel XLM Parser Denial of Service Vulnerability
HIGH (7.5)
A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper error handling that may result in an infinite loop. An attacker could exploit this vulnerability by sending a crafted Excel file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process hang, resulting in a denial of service condition.
Published: 2021-04-08T04:25:10.891Z
Updated: 2024-11-08T23:25:50.669Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.