Every CVE Search/ Get API key

CVE-2008-3215

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service...

5.0 MediumFix available

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

Exploit likelihood

4.71%Up 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

Record
CVE-2008-3215
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

Record
CVE-2008-3215
Updated
2026-11-02
EUVDEUVD-2008-3205 No score

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

Record
EUVD-2008-3205
Updated
2026-11-03
GitHub AdvisoriesGHSA-xfv3-wp5f-h673 No score

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service...

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

Record
GHSA-xfv3-wp5f-h673
Updated
2026-11-02
OSV No score

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

Record
CVE-2008-3215
Updated
2026-11-02
OSVDEBIAN-CVE-2008-3215 No score

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

Record
DEBIAN-CVE-2008-3215
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
clamav
Debian:12
 before 0.93.1.dfsg-1.1
0.93.1.dfsg-1.1
clamav
Debian:13
 before 0.93.1.dfsg-1.1
0.93.1.dfsg-1.1
clamav
Debian:14
 before 0.93.1.dfsg-1.1
0.93.1.dfsg-1.1
clamav
Debian:4.0
From an advisory covering 2 CVEs
 before 0.90.1dfsg-3.1etch14, plus listed versions
0.90.1-20.90.1-3.1lenny20.90.1-3.1lenny30.90.1-3etch10.90.1-3etch2
Show 10 moreShow less
0.90.1-3etch30.90.1-3etch40.90.1-3etch50.90.1-3etch60.90.1-3etch70.90.1-3etch80.90.1dfsg-3etch100.90.1dfsg-3etch110.90.1dfsg-3etch130.90.1dfsg-3etch9
0.90.1dfsg-3.1etch14

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-3215 is a medium vulnerability (CVSS 5.0) in Clam Anti-virus Clamav, published July 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.71%, the 91st percentile. Fixed in clamav 0.93.1.dfsg-1.1.

References

Show 14 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open