CVE-2008-3914
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors...
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c.
Exploit likelihood
What each source reports
NVD Score used
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c.
- Record
CVE-2008-3914- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c.
- Record
CVE-2008-3914- Updated
- 2026-11-02
EUVDEUVD-2008-3899 No score
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c.
- Record
EUVD-2008-3899- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3qxg-frxh-f5j5 No score
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors...
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c.
- Record
GHSA-3qxg-frxh-f5j5- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c.
- Record
CVE-2008-3914- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-3914 No score
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c.
- Record
DEBIAN-CVE-2008-3914- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clamavDebian:12 |
before 0.94.dfsg-1 | 0.94.dfsg-1 |
clamavDebian:13 |
before 0.94.dfsg-1 | 0.94.dfsg-1 |
clamavDebian:14 |
before 0.94.dfsg-1 | 0.94.dfsg-1 |
clamavDebian:4.0 From an advisory covering 3 CVEs |
before 0.90.1dfsg-4etch15, plus listed versions 0.90.1-20.90.1-3.1lenny20.90.1-3.1lenny30.90.1-3etch10.90.1-3etch2 Show 11 moreShow less0.90.1-3etch30.90.1-3etch40.90.1-3etch50.90.1-3etch60.90.1-3etch70.90.1-3etch80.90.1dfsg-3.1+etch140.90.1dfsg-3etch100.90.1dfsg-3etch110.90.1dfsg-3etch130.90.1dfsg-3etch9 |
0.90.1dfsg-4etch15 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3914 is a high vulnerability (CVSS 10.0) in Clamav, published September 9, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.58%, the 89th percentile. Fixed in clamav 0.94.dfsg-1.
References
secunia.com/advisories/32030
securityfocus.com/bid/31051
wwws.clamav.net/bugzilla/show_bug.cgi?id=1141
openwall.com/lists/oss-security/2008/09/04/13
Show 23 moreShow less
lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661
mandriva.com/security/advisories?name=MDVSA-2008:189
redhat.com/archives/fedora-package-announce/2008-November/msg00348.html
security.gentoo.org/glsa/glsa-200809-18.xml
kolab.org/security/kolab-vendor-notice-22.txt
securitytracker.com/id?1020828
debian.org/security/2008/dsa-1660
vupen.com/english/advisories/2008/2780
lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
support.apple.com/kb/HT3216
svn.clamav.net/svn/clamav-devel/trunk/ChangeLog
exchange.xforce.ibmcloud.com/vulnerabilities/45058
nvd.nist.gov/vuln/detail/CVE-2008-3914
github.com/advisories/GHSA-3qxg-frxh-f5j5
security-tracker.debian.org/tracker/CVE-2008-3914