{"id":"CVE-2026-20337","aliases":["AZL-95456","EUVD-2026-54528","GHSA-rhg3-hwfw-hp7p","SUSE-SU-2026:23706-1","SUSE-SU-2026:23727-1","SUSE-SU-2026:4179-1","SUSE-SU-2026:4180-1","SUSE-SU-2026:4208-1","UBUNTU-CVE-2026-20337","USN-8788-1","openSUSE-SU-2026:11583-1","openSUSE-SU-2026:21831-1"],"status":"published","title":"ClamAV ZIP File Format Processing Memory Corruption Vulnerability","description":"A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in zip files during scanning, which may result in an out-of-bounds write condition. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00602,"percentile":0.49083,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2026-08-07T16:41:51Z","modified":"2026-10-23T20:10:00Z","fixes":[{"ecosystem":"Azure Linux:3","package":"clamav","fixed_in":["1.5.4-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"clamav","fixed_in":["1.5.4+dfsg-0ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"clamav","fixed_in":["1.5.4+dfsg-0ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"clamav","fixed_in":["1.5.4+dfsg-0ubuntu0.26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-3.59.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-3.59.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150600.18.31.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150600.18.31.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150600.18.31.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.97.8+dfsg-1ubuntu4","0.97.8+dfsg-1ubuntu5","0.98.1+dfsg-1ubuntu4","0.98.1+dfsg-1ubuntu5","0.98.1+dfsg-2ubuntu2","0.98.1+dfsg-4ubuntu1","0.98.1+dfsg-4ubuntu1.1","0.98.5+addedllvm-0ubuntu0.14.04.1","0.98.6+dfsg-0ubuntu0.14.04.1","0.98.7+dfsg-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.2","0.99.3+addedllvm-0ubuntu0.14.04.1","0.99.4+addedllvm-0ubuntu0.14.04.1","0.100.1+dfsg-1ubuntu0.14.04.1","0.100.1+dfsg-1ubuntu0.14.04.2","0.100.1+dfsg-1ubuntu0.14.04.3","0.100.1+dfsg-1ubuntu0.14.04.4","0.100.2+dfsg-1ubuntu0.14.04.1","0.100.2+dfsg-1ubuntu0.14.04.2","0.100.3+dfsg-0ubuntu0.14.04.1","0.100.3+dfsg-0ubuntu0.14.04.1+esm1","0.101.4+dfsg-0ubuntu0.14.04.1+esm1","0.102.1+dfsg-0ubuntu0.14.04.1+esm1","0.102.2+dfsg-0ubuntu0.14.04.1+esm1","0.102.3+dfsg-0ubuntu0.14.04.1+esm1","0.102.4+dfsg-0ubuntu0.14.04.1+esm1","0.103.2+dfsg-0ubuntu0.14.04.1+esm1","0.103.2+dfsg-0ubuntu0.14.04.1+esm2","0.103.5+dfsg-0ubuntu0.14.04.1+esm1","0.103.6+dfsg-0ubuntu0.14.04.1+esm1","0.103.8+dfsg-0ubuntu0.14.04.1+esm1","0.103.9+dfsg-0ubuntu0.14.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.98.7+dfsg-0ubuntu4","0.98.7+dfsg-0ubuntu5","0.99+dfsg-1ubuntu1","0.99+dfsg-1ubuntu1.1","0.99+dfsg-1ubuntu1.2","0.99.2+dfsg-0ubuntu0.16.04.1","0.99.2+dfsg-0ubuntu0.16.04.2","0.99.2+dfsg-0ubuntu0.16.04.3","0.99.3+addedllvm-0ubuntu0.16.04.1","0.99.4+addedllvm-0ubuntu0.16.04.1","0.100.1+dfsg-1ubuntu0.16.04.1","0.100.1+dfsg-1ubuntu0.16.04.2","0.100.1+dfsg-1ubuntu0.16.04.3","0.100.2+dfsg-1ubuntu0.16.04.1","0.100.3+dfsg-0ubuntu0.16.04.1","0.101.4+dfsg-0ubuntu0.16.04.1","0.102.1+dfsg-0ubuntu0.16.04.2","0.102.2+dfsg-0ubuntu0.16.04.1","0.102.3+dfsg-0ubuntu0.16.04.1","0.102.4+dfsg-0ubuntu0.16.04.1","0.103.2+dfsg-0ubuntu0.16.04.1","0.103.2+dfsg-0ubuntu0.16.04.1+esm1","0.103.5+dfsg-0ubuntu0.16.04.1+esm1","0.103.6+dfsg-0ubuntu0.16.04.1+esm1","0.103.8+dfsg-0ubuntu0.16.04.1+esm1","0.103.9+dfsg-0ubuntu0.16.04.1+esm1","0.103.12+dfsg-0ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.99.2+dfsg-6ubuntu2","0.99.3~beta1+dfsg-2ubuntu1","0.99.3~beta1+dfsg-2ubuntu2","0.99.3+addedllvm-0ubuntu1","0.99.3+addedllvm-0ubuntu2","0.99.4+addedllvm-0ubuntu1","0.100.1+dfsg-1ubuntu0.18.04.1","0.100.1+dfsg-1ubuntu0.18.04.2","0.100.1+dfsg-1ubuntu0.18.04.3","0.100.2+dfsg-1ubuntu0.18.04.1","0.100.3+dfsg-0ubuntu0.18.04.1","0.101.4+dfsg-0ubuntu0.18.04.1","0.102.1+dfsg-0ubuntu0.18.04.2","0.102.2+dfsg-0ubuntu0.18.04.1","0.102.3+dfsg-0ubuntu0.18.04.1","0.102.4+dfsg-0ubuntu0.18.04.1","0.103.2+dfsg-0ubuntu0.18.04.1","0.103.2+dfsg-0ubuntu0.18.04.2","0.103.2+dfsg-0ubuntu0.18.04.3","0.103.5+dfsg-0ubuntu0.18.04.1","0.103.6+dfsg-0ubuntu0.18.04.1","0.103.8+dfsg-0ubuntu0.18.04.1","0.103.9+dfsg-0ubuntu0.18.04.1+esm1","0.103.12+dfsg-0ubuntu0.18.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.101.4+dfsg-1ubuntu1","0.102.1+dfsg-1ubuntu1","0.102.1+dfsg-2ubuntu1","0.102.1+dfsg-2ubuntu2","0.102.2+dfsg-1ubuntu1","0.102.2+dfsg-2ubuntu1","0.102.3+dfsg-0ubuntu0.20.04.1","0.102.4+dfsg-0ubuntu0.20.04.1","0.103.2+dfsg-0ubuntu0.20.04.1","0.103.2+dfsg-0ubuntu0.20.04.2","0.103.5+dfsg-1~20.04.1","0.103.6+dfsg-0ubuntu0.20.04.1","0.103.8+dfsg-0ubuntu0.20.04.1","0.103.9+dfsg-0ubuntu0.20.04.1","0.103.11+dfsg-0ubuntu0.20.04.1","0.103.12+dfsg-0ubuntu0.20.04.1","1.4.3+dfsg-0ubuntu0.20.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.22.04.1"}]}],"versions":["0.103.3+dfsg-1","0.103.4+dfsg-1","0.103.4+dfsg-1build1","0.103.5+dfsg-1","0.103.6+dfsg-0ubuntu0.22.04.1","0.103.8+dfsg-0ubuntu0.22.04.1","0.103.9+dfsg-0ubuntu0.22.04.1","0.103.11+dfsg-0ubuntu0.22.04.1","0.103.12+dfsg-0ubuntu0.22.04.1","1.4.3+dfsg-0ubuntu0.22.04.1","1.4.4+dfsg-0ubuntu0.22.04.1","1.5.3+dfsg-0ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.24.04.1"}]}],"versions":["1.0.2+dfsg-1ubuntu1","1.0.3+dfsg-2ubuntu1","1.0.4+dfsg-0ubuntu1","1.0.5+dfsg-1ubuntu1","1.0.5+dfsg-1.1ubuntu2","1.0.5+dfsg-1.1ubuntu3","1.0.7+dfsg-0ubuntu0.24.04.1","1.0.8+dfsg-0ubuntu0.24.04.1","1.4.3+dfsg-0ubuntu0.24.04.1","1.4.4+dfsg-0ubuntu0.24.04.1","1.5.3+dfsg-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.26.04.1"}]}],"versions":["1.4.3+dfsg-0ubuntu2","1.4.3+dfsg-0ubuntu3","1.4.3+dfsg-2ubuntu1","1.4.3+dfsg-2ubuntu2","1.4.3+dfsg-2ubuntu3","1.4.4+dfsg-0ubuntu0.26.04.1","1.5.3+dfsg-0ubuntu0.26.04.1","1.5.3+dfsg-0ubuntu0.26.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.22.04.1"}]}],"versions":["0.103.3+dfsg-1","0.103.4+dfsg-1","0.103.4+dfsg-1build1","0.103.5+dfsg-1","0.103.6+dfsg-0ubuntu0.22.04.1","0.103.8+dfsg-0ubuntu0.22.04.1","0.103.9+dfsg-0ubuntu0.22.04.1","0.103.11+dfsg-0ubuntu0.22.04.1","0.103.12+dfsg-0ubuntu0.22.04.1","1.4.3+dfsg-0ubuntu0.22.04.1","1.4.4+dfsg-0ubuntu0.22.04.1","1.5.3+dfsg-0ubuntu0.22.04.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.24.04.1"}]}],"versions":["1.0.2+dfsg-1ubuntu1","1.0.3+dfsg-2ubuntu1","1.0.4+dfsg-0ubuntu1","1.0.5+dfsg-1ubuntu1","1.0.5+dfsg-1.1ubuntu2","1.0.5+dfsg-1.1ubuntu3","1.0.7+dfsg-0ubuntu0.24.04.1","1.0.8+dfsg-0ubuntu0.24.04.1","1.4.3+dfsg-0ubuntu0.24.04.1","1.4.4+dfsg-0ubuntu0.24.04.1","1.5.3+dfsg-0ubuntu0.24.04.1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.26.04.1"}]}],"versions":["1.4.3+dfsg-0ubuntu2","1.4.3+dfsg-0ubuntu3","1.4.3+dfsg-2ubuntu1","1.4.3+dfsg-2ubuntu2","1.4.3+dfsg-2ubuntu3","1.4.4+dfsg-0ubuntu0.26.04.1","1.5.3+dfsg-0ubuntu0.26.04.1","1.5.3+dfsg-0ubuntu0.26.04.2"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9}],"products":[{"vendor":"cisco","product":"cisco secure endpoint"}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20337","tags":["web"]},{"url":"https://github.com/advisories/GHSA-rhg3-hwfw-hp7p"},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623706-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271922","tags":["report"]},{"url":"https://bugzilla.suse.com/1274597","tags":["report"]},{"url":"https://bugzilla.suse.com/1274598","tags":["report"]},{"url":"https://bugzilla.suse.com/1274599","tags":["report"]},{"url":"https://bugzilla.suse.com/1274600","tags":["report"]},{"url":"https://bugzilla.suse.com/1274601","tags":["report"]},{"url":"https://bugzilla.suse.com/1274602","tags":["report"]},{"url":"https://bugzilla.suse.com/1274603","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46671","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623727-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264179-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264180-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264208-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-20337","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-20337","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8788-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-20338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20348","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-20337","title":"ClamAV ZIP File Format Processing Memory Corruption Vulnerability","description":"A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in zip files during scanning, which may result in an out-of-bounds write condition. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T16:41:51.036Z","modified":"2026-08-07T18:11:57.408Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T13:35:33.380441Z"}],"euvd":[{"id":"EUVD-2026-54528","description":"A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in zip files during scanning, which may result in an out-of-bounds write condition. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T16:41:51Z","modified":"2026-08-07T18:11:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:02:06.573967Z"}],"ghsa":[{"id":"GHSA-rhg3-hwfw-hp7p","title":"A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote...","description":"A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\n\nThis vulnerability is due to improper boundary checks for content in zip files during scanning, which may result in an out-of-bounds write condition. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T18:31:44Z","modified":"2026-08-07T18:31:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:10:11.66732Z"}],"nvd":[{"id":"CVE-2026-20337","description":"A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in zip files during scanning, which may result in an out-of-bounds write condition. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T17:17:02.413Z","modified":"2026-10-23T20:10:00.16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:12:35.386166Z"}],"osv":[{"id":"UBUNTU-CVE-2026-20337","description":"A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper boundary checks for content in zip files during scanning, which may result in an out-of-bounds write condition. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T17:17:00Z","modified":"2026-09-21T21:37:57.073084017Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:01.334185Z"},{"id":"AZL-95456","title":"CVE-2026-20337 affecting package clamav for versions less than 1.5.4-1","description":"A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in zip files during scanning, which may result in an out-of-bounds write condition. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T17:17:02Z","modified":"2026-09-10T14:16:46.702388601Z","updated_at":"2026-11-02T15:28:12.028669Z"},{"id":"openSUSE-SU-2026:11583-1","title":"clamav-1.5.4-1.1 on GA media","description":"These are all security issues fixed in the clamav-1.5.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-08-26T18:23:37.982310091Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21831-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n\n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-11T12:01:10Z","modified":"2026-09-13T12:15:04.263684091Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:23706-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n\n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-11T12:00:06Z","modified":"2026-09-29T18:23:21.314210871Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:23727-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n\n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-11T12:00:06Z","modified":"2026-09-29T18:23:13.298145534Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4179-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n  \n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-14T14:48:44Z","modified":"2026-09-15T17:00:06.098913277Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4180-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: ejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n  \n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-14T14:49:34Z","modified":"2026-09-15T17:00:06.103385082Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4208-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n\n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-16T08:23:41Z","modified":"2026-09-16T21:45:03.610057216Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"USN-8788-1","title":"clamav vulnerabilities","description":"It was discovered that ClamAV incorrectly handled certain zip archive\nfiles. A remote attacker could possibly use this issue to cause ClamAV\nto crash, resulting in a denial of service. (CVE-2026-20337,\nCVE-2026-20338)\n\nIt was discovered that ClamAV incorrectly handled certain PESpin files.\nA remote attacker could possibly use this issue to cause ClamAV to\ncrash, resulting in a denial of service. (CVE-2026-20339)\n\nIt was discovered that ClamAV incorrectly handled certain GPT files. A\nremote attacker could possibly use this issue to cause ClamAV to crash,\nresulting in a denial of service. (CVE-2026-20345)\n\nIt was discovered that ClamAV incorrectly handled certain PDF files. A\nremote attacker could possibly use this issue to cause ClamAV to crash,\nresulting in a denial of service. (CVE-2026-20346)\n\nIt was discovered that ClamAV incorrectly handled certain Mach-O files.\nA remote attacker could possibly use this issue to cause ClamAV to\ncrash, resulting in a denial of service. (CVE-2026-20347)\n\nIt was discovered that ClamAV incorrectly handled certain XAR files. A\nremote attacker could possibly use this issue to cause ClamAV to crash,\nresulting in a denial of service. (CVE-2026-20348)","status":"published","published":"2026-09-21T12:05:10Z","modified":"2026-09-21T21:42:45.295245362Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}