{"id":"CVE-2017-12380","aliases":["ALPINE-CVE-2017-12380","DEBIAN-CVE-2017-12380","DLA-1261-1","EUVD-2017-3953","GHSA-cwqv-9665-6fh3","MGASA-2018-0117","SUSE-SU-2018:0254-1","SUSE-SU-2018:0255-1","UBUNTU-CVE-2017-12380","USN-3550-1","openSUSE-SU-2024:10685-1"],"status":"published","title":"ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an...","description":"ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.05123,"percentile":0.92438,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2018-01-26T20:00:00Z","modified":"2026-11-03T06:30:02Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"clamav","fixed_in":["0.99.3-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"clamav","fixed_in":["0.99.3~beta2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"clamav","fixed_in":["0.99.3~beta2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"clamav","fixed_in":["0.99.3~beta2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"clamav","fixed_in":["0.99.3+addedllvm-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"clamav","fixed_in":["0.99.3+addedllvm-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3~beta2+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3~beta2+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3~beta2+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2+dfsg-0+deb7u4"}]}],"versions":["0.97.8+dfsg-1","0.97.8+dfsg-1+powerpcspe1","0.98+dfsg-1","0.98.1+dfsg-1","0.98.1+dfsg-1+deb7u1","0.98.1+dfsg-1+deb7u2","0.98.1+dfsg-1+deb7u3","0.98.1+dfsg-1+deb7u4","0.98.1+dfsg-1+squeeze1","0.98.1+dfsg-2","0.98.1+dfsg-3","0.98.1+dfsg-4","0.98.1+dfsg-5","0.98.1+dfsg-6","0.98.3+dfsg-1","0.98.4+dfsg-0+deb7u1","0.98.4+dfsg-0+deb7u2","0.98.4+dfsg-1","0.98.4+dfsg-2","0.98.4~rc1+dfsg-1","0.98.4~rc1+dfsg-2","0.98.4~rc1+dfsg-3","0.98.5+dfsg-0+deb7u1","0.98.5+dfsg-0+deb7u2","0.98.5+dfsg-0+deb7u3","0.98.5+dfsg-1","0.98.5+dfsg-2","0.98.5+dfsg-3","0.98.5~beta1+dfsg-1","0.98.5~beta1+dfsg-2","0.98.5~beta1+dfsg-3","0.98.5~rc1+dfsg-1","0.98.5~rc1+dfsg-2","0.98.5~rc1+dfsg-3","0.98.5~rc1+dfsg-4","0.98.6+dfsg-0+deb7u1","0.98.6+dfsg-1","0.98.6+dfsg-2","0.98.6+dfsg-3","0.98.7+dfsg-0+deb7u1","0.98.7+dfsg-1","0.98.7+dfsg-2","0.98.7+dfsg-3","0.98.7+dfsg-4","0.98.7+dfsg-5","0.99+dfsg-0+deb7u1","0.99+dfsg-0+deb7u2","0.99+dfsg-1","0.99+dfsg-2","0.99.1+dfsg-1","0.99.2+dfsg-0+deb7u2","0.99.2+dfsg-0+deb7u3","0.99~beta1+dfsg-1","0.99~rc2+dfsg-1","0.99~rc2+dfsg-2"],"bundled":9},{"source":"osv","ecosystem":"Mageia:6","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-1.mga6"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-0.20.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-0.20.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-0.20.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-0.20.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-0.20.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-33.5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-33.5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-33.5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-33.5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-33.5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-33.5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-33.5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-33.5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-33.5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-33.5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-33.5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-33.5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3+addedllvm-0ubuntu0.14.04.1"}]}],"versions":["0.97.8+dfsg-1ubuntu4","0.97.8+dfsg-1ubuntu5","0.98.1+dfsg-1ubuntu4","0.98.1+dfsg-1ubuntu5","0.98.1+dfsg-2ubuntu2","0.98.1+dfsg-4ubuntu1","0.98.1+dfsg-4ubuntu1.1","0.98.5+addedllvm-0ubuntu0.14.04.1","0.98.6+dfsg-0ubuntu0.14.04.1","0.98.7+dfsg-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3+addedllvm-0ubuntu0.16.04.1"}]}],"versions":["0.98.7+dfsg-0ubuntu4","0.98.7+dfsg-0ubuntu5","0.99+dfsg-1ubuntu1","0.99+dfsg-1ubuntu1.1","0.99+dfsg-1ubuntu1.2","0.99.2+dfsg-0ubuntu0.16.04.1","0.99.2+dfsg-0ubuntu0.16.04.2","0.99.2+dfsg-0ubuntu0.16.04.3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3+addedllvm-0ubuntu0.14.04.1"}]}],"versions":["0.97.8+dfsg-1ubuntu4","0.97.8+dfsg-1ubuntu5","0.98.1+dfsg-1ubuntu4","0.98.1+dfsg-1ubuntu5","0.98.1+dfsg-2ubuntu2","0.98.1+dfsg-4ubuntu1","0.98.1+dfsg-4ubuntu1.1","0.98.5+addedllvm-0ubuntu0.14.04.1","0.98.6+dfsg-0ubuntu0.14.04.1","0.98.7+dfsg-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3+addedllvm-0ubuntu0.16.04.1"}]}],"versions":["0.98.7+dfsg-0ubuntu4","0.98.7+dfsg-0ubuntu5","0.99+dfsg-1ubuntu1","0.99+dfsg-1ubuntu1.1","0.99+dfsg-1ubuntu1.2","0.99.2+dfsg-0ubuntu0.16.04.1","0.99.2+dfsg-0ubuntu0.16.04.2","0.99.2+dfsg-0ubuntu0.16.04.3"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.3-1.4"}]}],"bundled":55}],"products":[{"vendor":"clamav","product":"clamav"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://usn.ubuntu.com/3550-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://usn.ubuntu.com/3550-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://bugzilla.clamav.net/show_bug.cgi?id=11945","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12380"},{"url":"https://github.com/advisories/GHSA-cwqv-9665-6fh3"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-12380","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-12380","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0117.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22482","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-01/msg00106.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/L2ULSX6GBGUOCP4V67LMFVR2C7DKKXCU/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180254-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1049423","tags":["report"]},{"url":"https://bugzilla.suse.com/1052448","tags":["report"]},{"url":"https://bugzilla.suse.com/1052449","tags":["report"]},{"url":"https://bugzilla.suse.com/1052466","tags":["report"]},{"url":"https://bugzilla.suse.com/1077732","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6420","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180255-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1040662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12380","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3550-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3550-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12377","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12379","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-1252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-1404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-1405","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-12380","description":"ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition.","status":"published","published":"2018-01-26T20:00:00Z","modified":"2024-12-02T21:25:19.745Z","updated_at":"2026-11-02T14:33:17.59533Z"}],"euvd":[{"id":"EUVD-2017-3953","description":"ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition.","status":"published","published":"2018-01-26T20:00:00Z","modified":"2024-12-02T21:25:19Z","updated_at":"2026-11-03T00:04:43.118962Z"}],"ghsa":[{"id":"GHSA-cwqv-9665-6fh3","title":"ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an...","description":"ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition.","status":"published","published":"2022-05-14T03:37:36Z","modified":"2023-02-02T05:07:59Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:52:38.092316Z"}],"nvd":[{"id":"CVE-2017-12380","description":"ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition.","status":"published","published":"2018-01-26T20:29:00.69Z","modified":"2026-06-17T01:03:15.05Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:04:13.257031Z"}],"osv":[{"id":"ALPINE-CVE-2017-12380","description":"ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition.","status":"published","published":"2018-01-26T20:29:00.69Z","modified":"2026-11-03T06:30:02.456263012Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T06:41:39.834803Z"},{"id":"CVE-2017-12380","description":"ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition.","status":"published","published":"2018-01-26T20:29:00.69Z","modified":"2026-10-24T10:30:24.915368408Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:04.159616Z"},{"id":"DEBIAN-CVE-2017-12380","description":"ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition.","status":"published","published":"2018-01-26T20:29:00.69Z","modified":"2026-09-01T20:03:42.051294224Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.50097Z"},{"id":"UBUNTU-CVE-2017-12380","description":"ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition.","status":"published","published":"2018-01-29T00:00:00Z","modified":"2026-04-22T11:12:56.839418Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.122973Z"},{"id":"DLA-1261-1","title":"clamav - security update","status":"published","published":"2018-01-27T00:00:00Z","modified":"2026-03-09T01:01:47.696167Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"MGASA-2018-0117","title":"Updated clamav packages fix security vulnerability","description":"The ClamAV AntiVirus software versions 0.99.2 and prior contain a\nvulnerability that could allow an unauthenticated, remote attacker to\ncause a denial of service (DoS) condition on an affected device. The\nvulnerability is due to a lack of input validation checking mechanisms\nduring certain mail parsing operations (mbox.c operations on bounce\nmessages). If successfully exploited, the ClamAV software could allow a\nvariable pointing to the mail body which could cause a used after being\nfree (use-after-free) instance which may lead to a disruption of services\non an affected device to include a denial of service condition.\n(CVE-2017-12374)\n\nThe ClamAV AntiVirus software versions 0.99.2 and prior contain a\nvulnerability that could allow an unauthenticated, remote attacker to\ncause a denial of service (DoS) condition on an affected device. The\nvulnerability is due to a lack of input validation checking mechanisms\nduring certain mail parsing functions (the rfc2047 function in mbox.c). An\nunauthenticated, remote attacker could exploit this vulnerability by\nsending a crafted email to the affected device. This action could cause a\nbuffer overflow condition when ClamAV scans the malicious email, allowing\nthe attacker to potentially cause a DoS condition on an affected device.\n(CVE-2017-12375)\n\nClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability\nthat could allow an unauthenticated, remote attacker to cause a denial of\nservice (DoS) condition or potentially execute arbitrary code on an affected\ndevice. The vulnerability is due to improper input validation checking\nmechanisms when handling Portable Document Format (.pdf) files sent to an\naffected device. An unauthenticated, remote attacker could exploit this\nvulnerability by sending a crafted .pdf file to an affected device. This\naction could cause a handle_pdfname (in pdf.c) buffer overflow when ClamAV\nscans the malicious file, allowing the attacker to cause a DoS condition\nor potentially execute arbitrary code. (CVE-2017-12376)\n\nClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability\nthat could allow an unauthenticated, remote attacker to cause a denial of\nservice (DoS) condition or potentially execute arbitrary code on an affected\ndevice. The vulnerability is due to improper input validation checking\nmechanisms in mew packet files sent to an affected device. A successful\nexploit could cause a heap-based buffer over-read condition in mew.c when\nClamAV scans the malicious file, allowing the attacker to cause a DoS\ncondition or potentially execute arbitrary code on the affected device.\n(CVE-2017-12377)\n\nClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability\nthat could allow an unauthenticated, remote attacker to cause a denial of\nservice (DoS) condition on an affected device. The vulnerability is due to\nimproper input validation checking mechanisms of .tar (Tape Archive) files\nsent to an affected device. A successful exploit could cause a checksum\nbuffer over-read condition when ClamAV scans the malicious .tar file,\npotentially allowing the attacker to cause a DoS condition on the affected\ndevice. (CVE-2017-12378)\n\nClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability\nthat could allow an unauthenticated, remote attacker to cause a denial of\nservice (DoS) condition or potentially execute arbitrary code on an affected\ndevice. The vulnerability is due to improper input validation checking\nmechanisms in the message parsing function on an affected system. An\nunauthenticated, remote attacker could exploit this vulnerability by sending\na crafted email to the affected device. This action could cause a\nmessageAddArgument (in message.c) buffer overflow condition when ClamAV\nscans the malicious email, allowing the attacker to potentially cause a DoS\ncondition or execute arbitrary code on an affected device. (CVE-2017-12379)\n\nClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability\nthat could allow an unauthenticated, remote attacker to cause a denial of\nservice (DoS) condition on an affected device. The vulnerability is due to\nimproper input validation checking mechanisms in mbox.c during certain mail\nparsing functions of the ClamAV software. An unauthenticated, remote\nattacker could exploit this vulnerability by sending a crafted email to the\naffected device. An exploit could trigger a NULL pointer dereference\ncondition when ClamAV scans the malicious email, which may result in a DoS\ncondition. (CVE-2017-12380)\n","status":"published","published":"2018-02-06T06:25:44Z","modified":"2026-04-16T06:25:30.024155966Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10685-1","title":"clamav-0.103.3-1.4 on GA media","description":"These are all security issues fixed in the clamav-0.103.3-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:51:59.666103Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2018:0254-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- Update to security release 0.99.3 (bsc#1077732)\n  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)\n  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)\n  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)\n    - these vulnerabilities could have allowed an unauthenticated,\n      remote attacker to cause a denial of service (DoS) condition\n      or potentially execute arbitrary code on an affected device.\n  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)\n  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)\n  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)\n  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)\n    - these vulnerabilities could have allowed an unauthenticated,\n      remote attacker to cause a denial of service (DoS) condition on an affected device.\n  * CVE-2017-6420 (bsc#1052448)\n    - this vulnerability could have allowed remote attackers to cause a denial of service\n      (use-after-free) via a crafted PE file with WWPack compression.\n  * CVE-2017-6419 (bsc#1052449)\n    - ClamAV could have allowed remote attackers to cause a denial of service\n      (heap-based buffer overflow and application crash) or possibly\n      have unspecified other impact via a crafted CHM file.\n  * CVE-2017-11423 (bsc#1049423)\n    - ClamAV could have allowed remote attackers to cause a denial of service\n      (stack-based buffer over-read and application crash) via a crafted CAB file.\n  * CVE-2017-6418 (bsc#1052466)\n    - ClamAV could have allowed remote attackers to cause a denial\n      of service (out-of-bounds read) via a crafted e-mail message.\n","status":"published","published":"2018-01-27T13:21:17Z","modified":"2026-02-04T03:33:21.889932Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0255-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- Update to security release 0.99.3 (bsc#1077732)\n  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)\n  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)\n  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)\n    - these vulnerabilities could have allowed an unauthenticated,\n      remote attacker to cause a denial of service (DoS) condition\n      or potentially execute arbitrary code on an affected device.\n  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)\n  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)\n  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)\n  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)\n    - these vulnerabilities could have allowed an unauthenticated,\n      remote attacker to cause a denial of service (DoS) condition on an affected device.\n  * CVE-2017-6420 (bsc#1052448)\n    - this vulnerability could have allowed remote attackers to cause a denial of service\n      (use-after-free) via a crafted PE file with WWPack compression.\n  * CVE-2017-6419 (bsc#1052449)\n    - ClamAV could have allowed remote attackers to cause a denial of service\n      (heap-based buffer overflow and application crash) or possibly\n      have unspecified other impact via a crafted CHM file.\n  * CVE-2017-11423 (bsc#1049423)\n    - ClamAV could have allowed remote attackers to cause a denial of service\n      (stack-based buffer over-read and application crash) via a crafted CAB file.\n  * CVE-2017-6418 (bsc#1052466)\n    - ClamAV could have allowed remote attackers to cause a denial\n      of service (out-of-bounds read) via a crafted e-mail message.\n- update upstream keys in the keyring\n\n- provide and obsolete clamav-nodb to trigger it's removal in Leap\n  bsc#1040662\n","status":"published","published":"2018-01-27T16:17:45Z","modified":"2025-05-02T04:06:08.450803Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3550-1","title":"clamav vulnerabilities","description":"It was discovered that ClamAV incorrectly handled parsing certain mail\nmessages. A remote attacker could use this issue to cause ClamAV to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2017-12374, CVE-2017-12375, CVE-2017-12379, CVE-2017-12380)\n\nIt was discovered that ClamAV incorrectly handled parsing certain PDF\nfiles. A remote attacker could use this issue to cause ClamAV to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2017-12376)\n\nIt was discovered that ClamAV incorrectly handled parsing certain mew\npacket files. A remote attacker could use this issue to cause ClamAV to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2017-12377)\n\nIt was discovered that ClamAV incorrectly handled parsing certain TAR\nfiles. A remote attacker could possibly use this issue to cause ClamAV to\ncrash, resulting in a denial of service. (CVE-2017-12378)\n\nIn the default installation, attackers would be isolated by the ClamAV\nAppArmor profile.\n","status":"published","published":"2018-01-30T17:41:07Z","modified":"2026-04-22T09:43:05.892283Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}