Known vulnerabilities in clamav-filesystem

Vendor: openEuler
Software: clamav-filesystem
Software CPE: cpe:2.3:o:openeuler:clamav-filesystem:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 12
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting clamav-filesystem clamav-filesystem is affected by 12 known vulnerabilities: 2 critical, 1 high, 8 medium, 1 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111270 - Out-of-bounds write
CVE-2025-20260		 CWE-787 Critical
No
No
 1.0.9-2 18.06.2025 SB2025061842
SB20250620165
SB20250620166
and 13 more
#VU96825 - Out-of-bounds read
CVE-2024-20505		 CWE-125 Medium
No
No
 0.103.12-1 05.09.2024 SB2024090511
SB20240905109
SB20240905110
and 16 more
#VU96824 - UNIX Symbolic Link (Symlink) Following
CVE-2024-20506		 CWE-61 Low
No
No
 0.103.12-1 05.09.2024 SB2024090511
SB20240905109
SB20240905110
and 13 more
#VU79633 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-20197		 CWE-835 Medium
No
No
 0.103.9-1 16.08.2023 SB20230816163
SB20230821217
SB20230821218
and 21 more
#VU72298 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-20052		 CWE-611 Medium
Available
No
 0.103.8-1 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 17 more
#VU72297 - Heap-based Buffer Overflow
CVE-2023-20032		 CWE-122 Critical
No
No
 0.103.8-1 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 18 more
#VU62803 - Heap-based Buffer Overflow
CVE-2022-20792		 CWE-122 High
No
No
 0.103.6-3 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 4 more
#VU62802 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-20771		 CWE-835 Medium
No
No
 0.103.6-3 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 14 more
#VU62800 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-20770		 CWE-835 Medium
No
No
 0.103.6-3 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 14 more
#VU62798 - Missing release of memory after effective lifetime
CVE-2022-20785		 CWE-401 Medium
No
No
 0.103.6-3 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 13 more
#VU59832 - Improper input validation
CVE-2022-20698		 CWE-20 Medium
No
No
 0.103.2-4 19.01.2022 SB2022011924
SB2022011853
SB2022011955
and 8 more
#VU23559 - Improper input validation
CVE-2019-15961		 CWE-20 Medium
No
No
 0.101.4-9 12.12.2019 SB2019121205
SB2019121208
SB2020010817
and 11 more