Approved changes feed: RSS · Atom

cpe:2.3:a:clamav:clamav:0.103.5:*:*:*:*:*:*:*

part: a version: 0.103.5 update: *

VendorClamav (1e757e73-0a07-5655-8f9d-e7b1c408ae90)
ProductClamav (6bd50a90-3838-55b3-b790-e75ee7286993)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/clamav purl2cpe 2026-06-01 10:12:02.633340
pkg:deb/ubuntu/clamav purl2cpe 2026-06-01 10:12:02.633341
pkg:docker/clamav/clamav purl2cpe 2026-06-01 10:12:02.633343
pkg:github/cisco-talos/clamav purl2cpe 2026-06-01 10:12:02.633344
pkg:rpm/fedora/clamav purl2cpe 2026-06-01 10:12:02.633345
pkg:rpm/opensuse/clamav purl2cpe 2026-06-01 10:12:02.633347

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-20796 vulnerable 2026-06-08 05:39:54.883397 ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022
MEDIUM (6.5)
On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog.
Published: 2022-05-04T17:06:09.040Z
Updated: 2024-11-06T16:15:40.237Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.