Known vulnerabilities in clamav (Ubuntu package) - page 2

Software CPE: cpe:2.3:o:canonical:clamav_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 55
Public exploits: 3
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting clamav (Ubuntu package) clamav (Ubuntu package) is affected by 55 known vulnerabilities: 2 critical, 8 high, 37 medium, 8 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96825 - Out-of-bounds read
CVE-2024-20505
CWE-125 Medium
No
No
Ubuntu Pro, 0.103.12+dfsg-0ubuntu0.20.04.1, 0.103.12+dfsg-0ubuntu0.22.04.1, 1.0.7+dfsg-0ubuntu0.24.04.1 05.09.2024 SB2024090511
SB20240905109
SB20240905110
and 16 more
#VU96824 - UNIX Symbolic Link (Symlink) Following
CVE-2024-20506
CWE-61 Low
No
No
Ubuntu Pro, 0.103.12+dfsg-0ubuntu0.20.04.1, 0.103.12+dfsg-0ubuntu0.22.04.1, 1.0.7+dfsg-0ubuntu0.24.04.1 05.09.2024 SB2024090511
SB20240905109
SB20240905110
and 13 more
#VU86262 - Heap-based Buffer Overflow
CVE-2024-20290
CWE-122 Medium
No
No
1.0.5+dfsg-0ubuntu0.23.10.1 08.02.2024 SB2024020749
SB2024020841
SB2024020880
and 5 more
#VU86229 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-20328
CWE-78 High
No
No
1.0.5+dfsg-0ubuntu0.23.10.1 07.02.2024 SB2024020749
SB2024020880
SB2024020881
and 3 more
#VU79711 - Improper Validation of Array Index
CVE-2023-40477
CWE-129 High
Available
No
0.103.11+dfsg-0ubuntu0.20.04.1, 0.103.11+dfsg-0ubuntu0.22.04.1, 0.103.11+dfsg-0ubuntu0.23.04.1, 1.0.4+dfsg-0ubuntu0.23.10.1 19.08.2023 SB2023081901
SB2023083134
SB2023083135
and 11 more
#VU79633 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-20197
CWE-835 Medium
No
No
Ubuntu Pro, 0.103.9+dfsg-0ubuntu0.20.04.1, 0.103.9+dfsg-0ubuntu0.22.04.1, 0.103.9+dfsg-0ubuntu0.23.04.1 16.08.2023 SB20230816163
SB20230821217
SB20230821218
and 21 more
#VU72298 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-20052
CWE-611 Medium
Available
No
Ubuntu Pro, 0.103.8+dfsg-0ubuntu0.18.04.1, 0.103.8+dfsg-0ubuntu0.20.04.1, 0.103.8+dfsg-0ubuntu0.22.04.1, 0.103.8+dfsg-0ubuntu0.22.10.1 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 17 more
#VU72297 - Heap-based Buffer Overflow
CVE-2023-20032
CWE-122 Critical
No
No
Ubuntu Pro, 0.103.8+dfsg-0ubuntu0.18.04.1, 0.103.8+dfsg-0ubuntu0.20.04.1, 0.103.8+dfsg-0ubuntu0.22.04.1, 0.103.8+dfsg-0ubuntu0.22.10.1 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 18 more
#VU62908 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-30333
CWE-22 Low
Available
Exploited
0.103.11+dfsg-0ubuntu0.20.04.1, 0.103.11+dfsg-0ubuntu0.22.04.1, 0.103.11+dfsg-0ubuntu0.23.04.1, 1.0.4+dfsg-0ubuntu0.23.10.1 10.05.2022 SB2022051004
SB2023091704
SB2024010819
and 3 more
#VU62803 - Heap-based Buffer Overflow
CVE-2022-20792
CWE-122 High
No
No
0.103.6+dfsg0ubuntu0.16.04.1+esm1, 0.103.6+dfsg-0ubuntu0.18.04.1, 0.103.6+dfsg-0ubuntu0.20.04.1, 0.103.6+dfsg-0ubuntu0.21.10.1, 0.103.6+dfsg-0ubuntu0.22.04.1 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 4 more
#VU62802 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-20771
CWE-835 Medium
No
No
0.103.6+dfsg0ubuntu0.16.04.1+esm1, 0.103.6+dfsg-0ubuntu0.18.04.1, 0.103.6+dfsg-0ubuntu0.20.04.1, 0.103.6+dfsg-0ubuntu0.21.10.1, 0.103.6+dfsg-0ubuntu0.22.04.1 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 14 more
#VU62801 - NULL Pointer Dereference
CVE-2022-20796
CWE-476 Medium
No
No
0.103.6+dfsg0ubuntu0.16.04.1+esm1, 0.103.6+dfsg-0ubuntu0.18.04.1, 0.103.6+dfsg-0ubuntu0.20.04.1, 0.103.6+dfsg-0ubuntu0.21.10.1, 0.103.6+dfsg-0ubuntu0.22.04.1 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 11 more
#VU62800 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-20770
CWE-835 Medium
No
No
0.103.6+dfsg0ubuntu0.16.04.1+esm1, 0.103.6+dfsg-0ubuntu0.18.04.1, 0.103.6+dfsg-0ubuntu0.20.04.1, 0.103.6+dfsg-0ubuntu0.21.10.1, 0.103.6+dfsg-0ubuntu0.22.04.1 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 14 more
#VU62798 - Missing release of memory after effective lifetime
CVE-2022-20785
CWE-401 Medium
No
No
0.103.6+dfsg0ubuntu0.16.04.1+esm1, 0.103.6+dfsg-0ubuntu0.18.04.1, 0.103.6+dfsg-0ubuntu0.20.04.1, 0.103.6+dfsg-0ubuntu0.21.10.1, 0.103.6+dfsg-0ubuntu0.22.04.1 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 13 more
#VU59832 - Improper input validation
CVE-2022-20698
CWE-20 Medium
No
No
0.103.5+dfsg-1~20.04.1, 0.103.5+dfsg-1~21.04.1, 0.103.5+dfsg-1~21.10.1, 0.103.5+dfsg0ubuntu0.16.04.1+esm1, 0.103.5+dfsg-0ubuntu0.18.04.1 19.01.2022 SB2022011924
SB2022011853
SB2022011955
and 8 more
#VU52793 - Out-of-bounds read
CVE-2021-1404
CWE-125 Medium
No
No
0.103.2+dfsg-0ubuntu0.14.04.1+esm1, 0.103.2+dfsg-0ubuntu0.16.04.1, 0.103.2+dfsg-0ubuntu0.18.04.1, 0.103.2+dfsg-0ubuntu0.18.04.2, 0.103.2+dfsg-0ubuntu0.20.04.1, 0.103.2+dfsg-0ubuntu0.20.04.2, 0.103.2+dfsg-0ubuntu0.20.10.1, 0.103.2+dfsg-0ubuntu0.20.10.2, 0.103.2+dfsg-1ubuntu0.21.04.1 03.05.2021 SB2021040720
SB2021041384
SB2021041427
and 5 more
#VU52792 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-1252
CWE-835 Medium
No
No
0.103.2+dfsg-0ubuntu0.14.04.1+esm1, 0.103.2+dfsg-0ubuntu0.16.04.1, 0.103.2+dfsg-0ubuntu0.18.04.1, 0.103.2+dfsg-0ubuntu0.18.04.2, 0.103.2+dfsg-0ubuntu0.20.04.1, 0.103.2+dfsg-0ubuntu0.20.04.2, 0.103.2+dfsg-0ubuntu0.20.10.1, 0.103.2+dfsg-0ubuntu0.20.10.2, 0.103.2+dfsg-1ubuntu0.21.04.1 03.05.2021 SB2021040720
SB2021041384
SB2021041427
and 5 more
#VU52784 - NULL Pointer Dereference
CVE-2021-1405
CWE-476 Medium
No
No
0.103.2+dfsg-0ubuntu0.14.04.1+esm1, 0.103.2+dfsg-0ubuntu0.16.04.1, 0.103.2+dfsg-0ubuntu0.18.04.1, 0.103.2+dfsg-0ubuntu0.18.04.2, 0.103.2+dfsg-0ubuntu0.20.04.1, 0.103.2+dfsg-0ubuntu0.20.04.2, 0.103.2+dfsg-0ubuntu0.20.10.1, 0.103.2+dfsg-0ubuntu0.20.10.2, 0.103.2+dfsg-1ubuntu0.21.04.1 01.05.2021 SB2021050109
SB2021040720
SB2021041384
and 6 more
#VU27927 - Out-of-bounds read
CVE-2020-3341
CWE-125 Medium
No
No
0.102.3+dfsg-0ubuntu0.12.04.1, 0.102.3+dfsg-0ubuntu0.14.04.1+esm1, 0.102.3+dfsg-0ubuntu0.16.04.1, 0.102.3+dfsg-0ubuntu0.18.04.1, 0.102.3+dfsg-0ubuntu0.19.10.1, 0.102.3+dfsg-0ubuntu0.20.04.1 15.05.2020 SB2020051508
SB2020052213
SB2020052214
and 9 more
#VU25015 - Out-of-bounds read
CVE-2020-3123
CWE-125 Medium
No
No
0.102.2+dfsg-0ubuntu0.16.04.1, 0.102.2+dfsg-0ubuntu0.18.04.1, 0.102.2+dfsg-0ubuntu0.19.10.1 06.02.2020 SB2020020617
SB2020021820
SB2020031930
and 5 more


Showing elements 21 - 40 out of 55