{"id":"CVE-2018-0202","aliases":["ALPINE-CVE-2018-0202","DEBIAN-CVE-2018-0202","DLA-1307-1","EUVD-2018-1025","GHSA-r382-prm5-5rqf","MGASA-2018-0169","SUSE-SU-2018:0809-1","SUSE-SU-2018:0863-1","UBUNTU-CVE-2018-0202","USN-3592-1","openSUSE-SU-2024:10685-1"],"status":"published","title":"clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated,...","description":"clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02581,"percentile":0.85317,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-125"],"published":"2018-03-06T00:00:00Z","modified":"2026-10-24T10:30:31Z","exploits":[{"source":"pocgithub","id":"automateforceai/CVE-2018-0202","title":"automateforceai/CVE-2018-0202","date":"2018-11-24","url":"https://github.com/automateforceai/CVE-2018-0202"}],"fixes":[{"ecosystem":"Alpine:v3.10","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"clamav","fixed_in":["0.100.0~beta+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"clamav","fixed_in":["0.100.0~beta+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"clamav","fixed_in":["0.100.0~beta+dfsg-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"clamav","fixed_in":["0.99.4+addedllvm-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"clamav","fixed_in":["0.99.4+addedllvm-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.100.0~beta+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.100.0~beta+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.100.0~beta+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4+dfsg-1+deb7u1"}]}],"versions":["0.97.8+dfsg-1","0.97.8+dfsg-1+powerpcspe1","0.98+dfsg-1","0.98.1+dfsg-1","0.98.1+dfsg-1+deb7u1","0.98.1+dfsg-1+deb7u2","0.98.1+dfsg-1+deb7u3","0.98.1+dfsg-1+deb7u4","0.98.1+dfsg-1+squeeze1","0.98.1+dfsg-2","0.98.1+dfsg-3","0.98.1+dfsg-4","0.98.1+dfsg-5","0.98.1+dfsg-6","0.98.3+dfsg-1","0.98.4+dfsg-0+deb7u1","0.98.4+dfsg-0+deb7u2","0.98.4+dfsg-1","0.98.4+dfsg-2","0.98.4~rc1+dfsg-1","0.98.4~rc1+dfsg-2","0.98.4~rc1+dfsg-3","0.98.5+dfsg-0+deb7u1","0.98.5+dfsg-0+deb7u2","0.98.5+dfsg-0+deb7u3","0.98.5+dfsg-1","0.98.5+dfsg-2","0.98.5+dfsg-3","0.98.5~beta1+dfsg-1","0.98.5~beta1+dfsg-2","0.98.5~beta1+dfsg-3","0.98.5~rc1+dfsg-1","0.98.5~rc1+dfsg-2","0.98.5~rc1+dfsg-3","0.98.5~rc1+dfsg-4","0.98.6+dfsg-0+deb7u1","0.98.6+dfsg-1","0.98.6+dfsg-2","0.98.6+dfsg-3","0.98.7+dfsg-0+deb7u1","0.98.7+dfsg-1","0.98.7+dfsg-2","0.98.7+dfsg-3","0.98.7+dfsg-4","0.98.7+dfsg-5","0.99+dfsg-0+deb7u1","0.99+dfsg-0+deb7u2","0.99+dfsg-1","0.99+dfsg-2","0.99.1+dfsg-1","0.99.2+dfsg-0+deb7u2","0.99.2+dfsg-0+deb7u3","0.99.2+dfsg-0+deb7u4","0.99.2+dfsg-0+deb7u5","0.99.2+dfsg-1","0.99.2+dfsg-2","0.99.2+dfsg-3","0.99.2+dfsg-4","0.99.2+dfsg-5","0.99.2+dfsg-6","0.99.3~beta1+dfsg-1","0.99.3~beta1+dfsg-2","0.99.3~beta1+dfsg-3","0.99.3~beta1+dfsg-4","0.99.3~beta2+dfsg-1","0.99.3~snapshot20170704+dfsg-1","0.99~beta1+dfsg-1","0.99~rc2+dfsg-1","0.99~rc2+dfsg-2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-0.20.7.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-0.20.7.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-0.20.7.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-0.20.7.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-0.20.7.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4+addedllvm-0ubuntu0.14.04.1"}]}],"versions":["0.97.8+dfsg-1ubuntu4","0.97.8+dfsg-1ubuntu5","0.98.1+dfsg-1ubuntu4","0.98.1+dfsg-1ubuntu5","0.98.1+dfsg-2ubuntu2","0.98.1+dfsg-4ubuntu1","0.98.1+dfsg-4ubuntu1.1","0.98.5+addedllvm-0ubuntu0.14.04.1","0.98.6+dfsg-0ubuntu0.14.04.1","0.98.7+dfsg-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.2","0.99.3+addedllvm-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4+addedllvm-0ubuntu0.16.04.1"}]}],"versions":["0.98.7+dfsg-0ubuntu4","0.98.7+dfsg-0ubuntu5","0.99+dfsg-1ubuntu1","0.99+dfsg-1ubuntu1.1","0.99+dfsg-1ubuntu1.2","0.99.2+dfsg-0ubuntu0.16.04.1","0.99.2+dfsg-0ubuntu0.16.04.2","0.99.2+dfsg-0ubuntu0.16.04.3","0.99.3+addedllvm-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4+addedllvm-0ubuntu0.14.04.1"}]}],"versions":["0.97.8+dfsg-1ubuntu4","0.97.8+dfsg-1ubuntu5","0.98.1+dfsg-1ubuntu4","0.98.1+dfsg-1ubuntu5","0.98.1+dfsg-2ubuntu2","0.98.1+dfsg-4ubuntu1","0.98.1+dfsg-4ubuntu1.1","0.98.5+addedllvm-0ubuntu0.14.04.1","0.98.6+dfsg-0ubuntu0.14.04.1","0.98.7+dfsg-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.2","0.99.3+addedllvm-0ubuntu0.14.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4+addedllvm-0ubuntu0.16.04.1"}]}],"versions":["0.98.7+dfsg-0ubuntu4","0.98.7+dfsg-0ubuntu5","0.99+dfsg-1ubuntu1","0.99+dfsg-1ubuntu1.1","0.99+dfsg-1ubuntu1.2","0.99.2+dfsg-0ubuntu0.16.04.1","0.99.2+dfsg-0ubuntu0.16.04.2","0.99.2+dfsg-0ubuntu0.16.04.3","0.99.3+addedllvm-0ubuntu0.16.04.1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.3-1.4"}]}],"bundled":55}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"cisco","product":"clamav"},{"vendor":"clamav","product":"clamav"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://usn.ubuntu.com/3592-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.clamav.net/show_bug.cgi?id=11973","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://bugzilla.clamav.net/show_bug.cgi?id=11980","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/03/msg00011.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3592-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201804-16","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0202"},{"url":"https://github.com/advisories/GHSA-r382-prm5-5rqf"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-0202","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-0202","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0169.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22737","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-1000085","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180809-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1045315","tags":["report"]},{"url":"https://bugzilla.suse.com/1049423","tags":["report"]},{"url":"https://bugzilla.suse.com/1052449","tags":["report"]},{"url":"https://bugzilla.suse.com/1082858","tags":["report"]},{"url":"https://bugzilla.suse.com/1083915","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000085","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180863-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-0202","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3592-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3592-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-0202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1000085","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-1252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-1404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-1405","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-0202","description":"clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.","status":"published","published":"2018-03-27T09:00:00Z","modified":"2024-12-02T20:55:52.456Z","updated_at":"2026-11-02T14:35:12.596526Z"}],"euvd":[{"id":"EUVD-2018-1025","description":"clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.","status":"published","published":"2018-03-27T09:00:00Z","modified":"2024-12-02T20:55:52Z","updated_at":"2026-11-03T00:04:43.118962Z"}],"ghsa":[{"id":"GHSA-r382-prm5-5rqf","title":"clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated,...","description":"clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.","status":"published","published":"2022-05-14T01:15:23Z","modified":"2023-02-02T05:03:33Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:51:39.940381Z"}],"nvd":[{"id":"CVE-2018-0202","description":"clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.","status":"published","published":"2018-03-27T09:29:00.387Z","modified":"2026-06-17T01:30:12.723Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:24.700429Z"}],"osv":[{"id":"ALPINE-CVE-2018-0202","description":"clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.","status":"published","published":"2018-03-27T09:29:00.387Z","modified":"2026-10-23T17:23:24.978916289Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"CVE-2018-0202","description":"clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.","status":"published","published":"2018-03-27T09:29:00.387Z","modified":"2026-10-24T10:30:31.668900637Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:07.192756Z"},{"id":"DEBIAN-CVE-2018-0202","description":"clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.","status":"published","published":"2018-03-27T09:29:00.387Z","modified":"2026-10-23T18:02:55.321088265Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"UBUNTU-CVE-2018-0202","description":"clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.","status":"published","published":"2018-03-06T00:00:00Z","modified":"2026-04-22T11:38:57.390839Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"DLA-1307-1","title":"clamav - security update","status":"published","published":"2018-03-15T00:00:00Z","modified":"2026-03-09T01:01:05.760256Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"MGASA-2018-0169","title":"Updated clamav packages fix security vulnerabilities","description":"Clamav has been updated to fix 2 security issues and also contains a lot of \nbugfixes.\n\nOut-of-bounds access in the PDF parser (CVE-2018-0202)\nOut-of-bounds heap read in XAR parser (CVE-2018-1000085)\n","status":"published","published":"2018-03-14T17:00:53Z","modified":"2026-04-16T04:42:33.790655694Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10685-1","title":"clamav-0.103.3-1.4 on GA media","description":"These are all security issues fixed in the clamav-0.103.3-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:51:59.666103Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2018:0809-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2012-6706: VMSF_DELTA filter inside the unrar implementation allows an arbitrary memory write (bsc#1045315).\n- CVE-2017-6419: A heap-based buffer overflow that can lead to a denial of service in libmspack via a crafted CHM file (bsc#1052449).\n- CVE-2017-11423: A stack-based buffer over-read that can lead to a denial of service in mspack via a crafted CAB file (bsc#1049423).\n- CVE-2018-1000085: An out-of-bounds heap read vulnerability was found in XAR parser that can lead to a denial of service (bsc#1082858).\n- CVE-2018-0202: Fixed two vulnerabilities in the PDF parsing code (bsc#1083915).\n","status":"published","published":"2018-03-26T08:38:32Z","modified":"2026-02-04T03:08:59.985275Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0863-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2012-6706: VMSF_DELTA filter inside the unrar implementation allows an arbitrary memory write (bsc#1045315).\n- CVE-2017-6419: A heap-based buffer overflow that can lead to a denial of service in libmspack via a crafted CHM file (bsc#1052449).\n- CVE-2017-11423: A stack-based buffer over-read that can lead to a denial of service in mspack via a crafted CAB file (bsc#1049423).\n- CVE-2018-1000085: An out-of-bounds heap read vulnerability was found in XAR parser that can lead to a denial of service (bsc#1082858).\n- CVE-2018-0202: Fixed two vulnerabilities in the PDF parsing code (bsc#1083915).\n","status":"published","published":"2018-04-03T15:18:00Z","modified":"2026-02-04T03:31:38.390203Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3592-1","title":"clamav vulnerabilities","description":"It was discovered that ClamAV incorrectly handled parsing certain PDF\nfiles. A remote attacker could use this issue to cause ClamAV to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2018-0202)\n\nHanno Böck discovered that ClamAV incorrectly handled parsing certain XAR\nfiles. A remote attacker could use this issue to cause ClamAV to crash,\nresulting in a denial of service. (CVE-2018-1000085)\n","status":"published","published":"2018-03-08T12:16:21Z","modified":"2026-04-22T09:43:58.032619Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}