Known vulnerabilities in libfreshclam3

Vendor: SUSE
Software: libfreshclam3
Software CPE: cpe:2.3:o:suse:libfreshclam3:*:*:*:*:*:suse_linux:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libfreshclam3 libfreshclam3 is affected by 6 known vulnerabilities: 4 medium, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103240 - Heap-based Buffer Overflow
CVE-2025-20128
CWE-122 Medium
No
No
1.4.2-3.36.1, 1.4.2-150200.8.3.1, 1.4.2-150600.18.6.1 22.01.2025 SB2025012288
SB2025012289
SB2025012778
and 5 more
#VU96825 - Out-of-bounds read
CVE-2024-20505
CWE-125 Medium
No
No
1.4.2-3.36.1, 1.4.2-150200.8.3.1, 1.4.2-150600.18.6.1 05.09.2024 SB2024090511
SB20240905109
SB20240905110
and 16 more
#VU96824 - UNIX Symbolic Link (Symlink) Following
CVE-2024-20506
CWE-61 Low
No
No
1.4.2-3.36.1, 1.4.2-150200.8.3.1, 1.4.2-150600.18.6.1 05.09.2024 SB2024090511
SB20240905109
SB20240905110
and 13 more
#VU88800 - Improper input validation
CVE-2024-20380
CWE-20 Medium
No
No
1.4.2-3.36.1, 1.4.2-150200.8.3.1, 1.4.2-150600.18.6.1 17.04.2024 SB20240417143
SB2025020361
SB2025020362
and 2 more
#VU79633 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-20197
CWE-835 Medium
No
No
1.4.2-3.36.1, 1.4.2-150200.8.3.1, 1.4.2-150600.18.6.1 16.08.2023 SB20230816163
SB20230821217
SB20230821218
and 21 more
#VU14162 - Stack-based buffer overflow
CVE-2018-14679
CWE-121 Low
No
No
1.4.2-3.36.1, 1.4.2-150200.8.3.1, 1.4.2-150600.18.6.1 01.08.2018 SB2018080114
SB2018080302
SB2018080606
and 21 more