Known vulnerabilities in ClamAV 0.86_rc1

Vendor: ClamAV
Software: ClamAV
Version: 0.86_rc1
Software CPE: cpe:2.3:a:clamav:clamav_antivirus:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ClamAV version 0.86_rc1 ClamAV 0.86_rc1 is affected by 3 vulnerabilities: 1 critical, 2 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79633 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-20197
CWE-835 Medium
No
No
0.103.9, 1.0.2, 1.1.1 16.08.2023 SB20230816163
SB20230821217
SB20230821218
and 21 more
#VU72298 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-20052
CWE-611 Medium
Public exploit available
No
0.103.8, 0.105.2, 1.0.1 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 17 more
#VU72297 - Heap-based Buffer Overflow
CVE-2023-20032
CWE-122 Critical
No
No
0.103.8, 0.105.2, 1.0.1 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 18 more