Known vulnerabilities in clamav (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:clamav_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 55
Public exploits: 3
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting clamav (Ubuntu package) clamav (Ubuntu package) is affected by 55 known vulnerabilities: 2 critical, 8 high, 37 medium, 8 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141296 - Out-of-bounds write
CVE-2026-20337
CWE-787 Medium
No
No
1.5.4+dfsg-0ubuntu0.22.04.1, 1.5.4+dfsg-0ubuntu0.24.04.1, 1.5.4+dfsg-0ubuntu0.26.04.1 07.08.2026 SB2026080781
SB20261001118
#VU141297 - Out-of-bounds write
CVE-2026-20345
CWE-787 Medium
No
No
1.5.4+dfsg-0ubuntu0.22.04.1, 1.5.4+dfsg-0ubuntu0.24.04.1, 1.5.4+dfsg-0ubuntu0.26.04.1 07.08.2026 SB2026080781
SB20261001118
#VU141298 - Integer overflow
CVE-2026-20339
CWE-190 Medium
No
No
1.5.4+dfsg-0ubuntu0.22.04.1, 1.5.4+dfsg-0ubuntu0.24.04.1, 1.5.4+dfsg-0ubuntu0.26.04.1 07.08.2026 SB2026080781
SB20261001118
#VU141299 - Double Free
CVE-2026-20338
CWE-415 Medium
No
No
1.5.4+dfsg-0ubuntu0.22.04.1, 1.5.4+dfsg-0ubuntu0.24.04.1, 1.5.4+dfsg-0ubuntu0.26.04.1 07.08.2026 SB2026080781
SB20261001118
#VU141300 - Integer underflow
CVE-2026-20346
CWE-191 Medium
No
No
1.5.4+dfsg-0ubuntu0.22.04.1, 1.5.4+dfsg-0ubuntu0.24.04.1, 1.5.4+dfsg-0ubuntu0.26.04.1 07.08.2026 SB2026080781
SB20261001118
#VU141301 - Integer overflow
CVE-2026-20347
CWE-190 Medium
No
No
1.5.4+dfsg-0ubuntu0.22.04.1, 1.5.4+dfsg-0ubuntu0.24.04.1, 1.5.4+dfsg-0ubuntu0.26.04.1 07.08.2026 SB2026080781
SB20261001118
#VU141302 - Allocation of Resources Without Limits or Throttling
CVE-2026-20348
CWE-770 Medium
No
No
1.5.4+dfsg-0ubuntu0.22.04.1, 1.5.4+dfsg-0ubuntu0.24.04.1, 1.5.4+dfsg-0ubuntu0.26.04.1 07.08.2026 SB2026080781
SB20261001118
#VU136659 - Release of invalid pointer or reference
CVE-2026-20217
CWE-763 Medium
No
No
1.5.3+dfsg-0ubuntu0.22.04.2, 1.5.3+dfsg-0ubuntu0.24.04.1, 1.5.3+dfsg-0ubuntu0.26.04.1 01.07.2026 SB2026070169
SB2026070205
SB2026070876
and 8 more
#VU136660 - Integer overflow
CVE-2026-20213
CWE-190 High
No
No
1.5.3+dfsg-0ubuntu0.22.04.2, 1.5.3+dfsg-0ubuntu0.24.04.1, 1.5.3+dfsg-0ubuntu0.26.04.1 01.07.2026 SB2026070169
SB2026070205
SB2026070876
and 4 more
#VU136661 - Allocation of Resources Without Limits or Throttling
CVE-2026-20216
CWE-770 Medium
No
No
1.5.3+dfsg-0ubuntu0.22.04.2, 1.5.3+dfsg-0ubuntu0.24.04.1, 1.5.3+dfsg-0ubuntu0.26.04.1 01.07.2026 SB2026070169
SB2026070205
SB2026070876
and 8 more
#VU136662 - Integer underflow
CVE-2026-20214
CWE-191 High
No
No
1.5.3+dfsg-0ubuntu0.22.04.2, 1.5.3+dfsg-0ubuntu0.24.04.1, 1.5.3+dfsg-0ubuntu0.26.04.1 01.07.2026 SB2026070169
SB2026070205
SB2026070876
and 8 more
#VU136663 - Improper input validation
CVE-2026-20243
CWE-20 Medium
No
No
1.5.3+dfsg-0ubuntu0.22.04.2, 1.5.3+dfsg-0ubuntu0.24.04.1, 1.5.3+dfsg-0ubuntu0.26.04.1 01.07.2026 SB2026070169
SB2026070205
SB2026070876
and 4 more
#VU136664 - Integer overflow
CVE-2026-20215
CWE-190 High
No
No
1.5.3+dfsg-0ubuntu0.22.04.2, 1.5.3+dfsg-0ubuntu0.24.04.1, 1.5.3+dfsg-0ubuntu0.26.04.1 01.07.2026 SB2026070169
SB2026070205
SB2026070876
and 8 more
#VU136665 - Improper input validation
CVE-2026-20244
CWE-20 Medium
No
No
1.5.3+dfsg-0ubuntu0.22.04.2, 1.5.3+dfsg-0ubuntu0.24.04.1, 1.5.3+dfsg-0ubuntu0.26.04.1 01.07.2026 SB2026070169
SB2026070205
SB2026070876
and 8 more
#VU111271 - Out-of-bounds read
CVE-2025-20234
CWE-125 High
No
No
1.4.3+dfsg-0ubuntu0.20.04.1+esm1, 1.4.3+dfsg-0ubuntu0.22.04.1, 1.4.3+dfsg-0ubuntu0.24.04.1, 1.4.3+dfsg-0ubuntu0.24.10.1, 1.4.3+dfsg-0ubuntu0.25.04.1 18.06.2025 SB2025061842
SB2025061845
SB20250620165
and 8 more
#VU111270 - Out-of-bounds write
CVE-2025-20260
CWE-787 Critical
No
No
1.4.3+dfsg-0ubuntu0.20.04.1+esm1, 1.4.3+dfsg-0ubuntu0.22.04.1, 1.4.3+dfsg-0ubuntu0.24.04.1, 1.4.3+dfsg-0ubuntu0.24.10.1, 1.4.3+dfsg-0ubuntu0.25.04.1 18.06.2025 SB2025061842
SB20250620165
SB20250620166
and 13 more
#VU103240 - Heap-based Buffer Overflow
CVE-2025-20128
CWE-122 Medium
No
No
1.0.8+dfsg-0ubuntu0.24.04.1, 1.4.2+dfsg-0ubuntu0.24.10.1 22.01.2025 SB2025012288
SB2025012289
SB2025012778
and 5 more
#VU31824 - NULL Pointer Dereference
CVE-2020-3481
CWE-476 Medium
No
No
0.102.4+dfsg-0ubuntu0.12.04.1, 0.102.4+dfsg-0ubuntu0.14.04.1+esm1, 0.102.4+dfsg-0ubuntu0.16.04.1, 0.102.4+dfsg-0ubuntu0.18.04.1, 0.102.4+dfsg-0ubuntu0.20.04.1 24.07.2020 SB2020072424
SB2020072714
SB2020071814
and 8 more
#VU29233 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-3350
CWE-362 Low
No
No
0.102.4+dfsg-0ubuntu0.12.04.1, 0.102.4+dfsg-0ubuntu0.14.04.1+esm1, 0.102.4+dfsg-0ubuntu0.16.04.1, 0.102.4+dfsg-0ubuntu0.18.04.1, 0.102.4+dfsg-0ubuntu0.20.04.1 24.06.2020 SB2020062413
SB2020072714
SB2020071813
and 8 more
#VU27928 - Out-of-bounds read
CVE-2020-3327
CWE-125 Medium
No
No
0.102.3+dfsg-0ubuntu0.12.04.1, 0.102.3+dfsg-0ubuntu0.14.04.1+esm1, 0.102.3+dfsg-0ubuntu0.16.04.1, 0.102.3+dfsg-0ubuntu0.18.04.1, 0.102.3+dfsg-0ubuntu0.19.10.1, 0.102.3+dfsg-0ubuntu0.20.04.1, 0.102.4+dfsg-0ubuntu0.12.04.1, 0.102.4+dfsg-0ubuntu0.14.04.1+esm1, 0.102.4+dfsg-0ubuntu0.16.04.1, 0.102.4+dfsg-0ubuntu0.18.04.1, 0.102.4+dfsg-0ubuntu0.20.04.1 15.05.2020 SB2020051508
SB2020052213
SB2020052214
and 17 more


Showing elements 1 - 20 out of 55