Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-20213 (GCVE-0-2026-20213)
Vulnerability from cvelistv5 – Published: 2026-07-01 16:27 – Updated: 2026-07-01 17:25
VLAI
EPSS
VEX
Title
ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability
Summary
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Endpoint |
Affected:
7.0.5
Affected: 6.2.19 Affected: 7.3.3 Affected: 7.2.13 Affected: 6.1.5 Affected: 6.3.1 Affected: 6.2.5 Affected: 7.3.5 Affected: 6.2.1 Affected: 7.2.7 Affected: 7.1.1 Affected: 6.3.5 Affected: 6.2.9 Affected: 7.3.1 Affected: 6.1.7 Affected: 7.2.11 Affected: 7.2.3 Affected: 7.1.5 Affected: 6.3.3 Affected: 7.3.9 Affected: 6.2.3 Affected: 6.1.9 Affected: 6.0.9 Affected: 7.2.5 Affected: 6.0.7 Affected: 6.3.7 Affected: 1.12.3 Affected: 1.8.0 Affected: 1.11.1 Affected: 1.12.4 Affected: 1.10.0 Affected: 1.12.0 Affected: 1.8.1 Affected: 1.10.1 Affected: 1.12.1 Affected: 1.12.6 Affected: 1.14.0 Affected: 1.10.2 Affected: 1.12.7 Affected: 1.12.2 Affected: 1.6.0 Affected: 1.9.0 Affected: 1.11.0 Affected: 1.7.0 Affected: 1.13.0 Affected: 1.8.4 Affected: 1.13.1 Affected: 1.9.1 Affected: 1.12.5 Affected: 1.13.2 Affected: 8.1.7.21512 Affected: 8.1.7 Affected: 8.1.5 Affected: 8.1.3.21242 Affected: 8.1.3 Affected: 8.1.5.21322 Affected: 8.1.7.21417 Affected: 1.14.1 Affected: 1.15.1 Affected: 1.15.2 Affected: 1.15.3 Affected: 1.15.4 Affected: 1.15.5 Affected: 1.15.6 Affected: 1.16.0 Affected: 1.16.1 Affected: 1.16.2 Affected: 1.16.3 Affected: 1.18.0 Affected: 1.18.1 Affected: 1.20.0 Affected: 1.21.0 Affected: 1.21.1 Affected: 1.21.2 Affected: 1.21.3 Affected: 1.22.0 Affected: 1.22.1 Affected: 1.22.2 Affected: 1.22.3 Affected: 1.22.4 Affected: 1.24.0 Affected: 1.24.1 Affected: 1.24.2 Affected: 1.24.3 Affected: 1.24.4 Affected: 1.26.0 Affected: 1.24.5 Affected: 1.26.1 Affected: 1.27.0 Affected: 1.15.0 Affected: 1.17.0 Affected: 1.17.1 Affected: 1.17.2 Affected: 1.19.0 Affected: 1.20.1 Affected: 1.20.2 Affected: 1.20.3 Affected: 1.20.4 Affected: 1.20.5 Affected: 1.20.6 Affected: 1.23.0 Affected: 1.23.1 Affected: 1.20.7 Affected: 1.20.8 Affected: 1.25.0 Affected: 1.25.1 Affected: 1.25.2 Affected: 1.27.1 Affected: 1.27.2 Affected: 7.3.13 Affected: 7.3.15 Affected: 7.4.1 Affected: 7.4.1.20425 Affected: 7.4.1.20439 Affected: 7.4.3 Affected: 7.4.3.20679 Affected: 7.4.5 Affected: 7.5.1.20813 Affected: 7.5.1.20833 Affected: 7.5.3 Affected: 7.5.5 Affected: 8.0.1.21160 Affected: 8.0.1.21164 Affected: 7.5.7 Affected: 7.5.9 Affected: 7.5.11 Affected: 8.1.7.21585 Affected: 7.5.13.21586 Affected: 7.5.13.21598 Affected: 8.2.1.21612 Affected: 8.2.1.21650 Affected: 7.5.15.21611 Affected: 7.5.17.21680 Affected: 8.2.3.30119 Affected: 8.2.4.30130 Affected: 8.4.0 Affected: 7.5.19 Affected: 8.4.1.30298 Affected: 8.4.2.30317 Affected: 8.4.1.30307 Affected: 7.5.20 Affected: 8.4.3 Affected: 8.4.4.30419 Affected: 8.4.4.30467 Affected: 7.5.21.21732 Affected: 8.4.5.30483 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20213",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-01T17:18:10.967118Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-01T17:25:08.998Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Endpoint",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "6.2.19"
},
{
"status": "affected",
"version": "7.3.3"
},
{
"status": "affected",
"version": "7.2.13"
},
{
"status": "affected",
"version": "6.1.5"
},
{
"status": "affected",
"version": "6.3.1"
},
{
"status": "affected",
"version": "6.2.5"
},
{
"status": "affected",
"version": "7.3.5"
},
{
"status": "affected",
"version": "6.2.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.1.1"
},
{
"status": "affected",
"version": "6.3.5"
},
{
"status": "affected",
"version": "6.2.9"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "6.1.7"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.1.5"
},
{
"status": "affected",
"version": "6.3.3"
},
{
"status": "affected",
"version": "7.3.9"
},
{
"status": "affected",
"version": "6.2.3"
},
{
"status": "affected",
"version": "6.1.9"
},
{
"status": "affected",
"version": "6.0.9"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "6.0.7"
},
{
"status": "affected",
"version": "6.3.7"
},
{
"status": "affected",
"version": "1.12.3"
},
{
"status": "affected",
"version": "1.8.0"
},
{
"status": "affected",
"version": "1.11.1"
},
{
"status": "affected",
"version": "1.12.4"
},
{
"status": "affected",
"version": "1.10.0"
},
{
"status": "affected",
"version": "1.12.0"
},
{
"status": "affected",
"version": "1.8.1"
},
{
"status": "affected",
"version": "1.10.1"
},
{
"status": "affected",
"version": "1.12.1"
},
{
"status": "affected",
"version": "1.12.6"
},
{
"status": "affected",
"version": "1.14.0"
},
{
"status": "affected",
"version": "1.10.2"
},
{
"status": "affected",
"version": "1.12.7"
},
{
"status": "affected",
"version": "1.12.2"
},
{
"status": "affected",
"version": "1.6.0"
},
{
"status": "affected",
"version": "1.9.0"
},
{
"status": "affected",
"version": "1.11.0"
},
{
"status": "affected",
"version": "1.7.0"
},
{
"status": "affected",
"version": "1.13.0"
},
{
"status": "affected",
"version": "1.8.4"
},
{
"status": "affected",
"version": "1.13.1"
},
{
"status": "affected",
"version": "1.9.1"
},
{
"status": "affected",
"version": "1.12.5"
},
{
"status": "affected",
"version": "1.13.2"
},
{
"status": "affected",
"version": "8.1.7.21512"
},
{
"status": "affected",
"version": "8.1.7"
},
{
"status": "affected",
"version": "8.1.5"
},
{
"status": "affected",
"version": "8.1.3.21242"
},
{
"status": "affected",
"version": "8.1.3"
},
{
"status": "affected",
"version": "8.1.5.21322"
},
{
"status": "affected",
"version": "8.1.7.21417"
},
{
"status": "affected",
"version": "1.14.1"
},
{
"status": "affected",
"version": "1.15.1"
},
{
"status": "affected",
"version": "1.15.2"
},
{
"status": "affected",
"version": "1.15.3"
},
{
"status": "affected",
"version": "1.15.4"
},
{
"status": "affected",
"version": "1.15.5"
},
{
"status": "affected",
"version": "1.15.6"
},
{
"status": "affected",
"version": "1.16.0"
},
{
"status": "affected",
"version": "1.16.1"
},
{
"status": "affected",
"version": "1.16.2"
},
{
"status": "affected",
"version": "1.16.3"
},
{
"status": "affected",
"version": "1.18.0"
},
{
"status": "affected",
"version": "1.18.1"
},
{
"status": "affected",
"version": "1.20.0"
},
{
"status": "affected",
"version": "1.21.0"
},
{
"status": "affected",
"version": "1.21.1"
},
{
"status": "affected",
"version": "1.21.2"
},
{
"status": "affected",
"version": "1.21.3"
},
{
"status": "affected",
"version": "1.22.0"
},
{
"status": "affected",
"version": "1.22.1"
},
{
"status": "affected",
"version": "1.22.2"
},
{
"status": "affected",
"version": "1.22.3"
},
{
"status": "affected",
"version": "1.22.4"
},
{
"status": "affected",
"version": "1.24.0"
},
{
"status": "affected",
"version": "1.24.1"
},
{
"status": "affected",
"version": "1.24.2"
},
{
"status": "affected",
"version": "1.24.3"
},
{
"status": "affected",
"version": "1.24.4"
},
{
"status": "affected",
"version": "1.26.0"
},
{
"status": "affected",
"version": "1.24.5"
},
{
"status": "affected",
"version": "1.26.1"
},
{
"status": "affected",
"version": "1.27.0"
},
{
"status": "affected",
"version": "1.15.0"
},
{
"status": "affected",
"version": "1.17.0"
},
{
"status": "affected",
"version": "1.17.1"
},
{
"status": "affected",
"version": "1.17.2"
},
{
"status": "affected",
"version": "1.19.0"
},
{
"status": "affected",
"version": "1.20.1"
},
{
"status": "affected",
"version": "1.20.2"
},
{
"status": "affected",
"version": "1.20.3"
},
{
"status": "affected",
"version": "1.20.4"
},
{
"status": "affected",
"version": "1.20.5"
},
{
"status": "affected",
"version": "1.20.6"
},
{
"status": "affected",
"version": "1.23.0"
},
{
"status": "affected",
"version": "1.23.1"
},
{
"status": "affected",
"version": "1.20.7"
},
{
"status": "affected",
"version": "1.20.8"
},
{
"status": "affected",
"version": "1.25.0"
},
{
"status": "affected",
"version": "1.25.1"
},
{
"status": "affected",
"version": "1.25.2"
},
{
"status": "affected",
"version": "1.27.1"
},
{
"status": "affected",
"version": "1.27.2"
},
{
"status": "affected",
"version": "7.3.13"
},
{
"status": "affected",
"version": "7.3.15"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.4.1.20425"
},
{
"status": "affected",
"version": "7.4.1.20439"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.4.3.20679"
},
{
"status": "affected",
"version": "7.4.5"
},
{
"status": "affected",
"version": "7.5.1.20813"
},
{
"status": "affected",
"version": "7.5.1.20833"
},
{
"status": "affected",
"version": "7.5.3"
},
{
"status": "affected",
"version": "7.5.5"
},
{
"status": "affected",
"version": "8.0.1.21160"
},
{
"status": "affected",
"version": "8.0.1.21164"
},
{
"status": "affected",
"version": "7.5.7"
},
{
"status": "affected",
"version": "7.5.9"
},
{
"status": "affected",
"version": "7.5.11"
},
{
"status": "affected",
"version": "8.1.7.21585"
},
{
"status": "affected",
"version": "7.5.13.21586"
},
{
"status": "affected",
"version": "7.5.13.21598"
},
{
"status": "affected",
"version": "8.2.1.21612"
},
{
"status": "affected",
"version": "8.2.1.21650"
},
{
"status": "affected",
"version": "7.5.15.21611"
},
{
"status": "affected",
"version": "7.5.17.21680"
},
{
"status": "affected",
"version": "8.2.3.30119"
},
{
"status": "affected",
"version": "8.2.4.30130"
},
{
"status": "affected",
"version": "8.4.0"
},
{
"status": "affected",
"version": "7.5.19"
},
{
"status": "affected",
"version": "8.4.1.30298"
},
{
"status": "affected",
"version": "8.4.2.30317"
},
{
"status": "affected",
"version": "8.4.1.30307"
},
{
"status": "affected",
"version": "7.5.20"
},
{
"status": "affected",
"version": "8.4.3"
},
{
"status": "affected",
"version": "8.4.4.30419"
},
{
"status": "affected",
"version": "8.4.4.30467"
},
{
"status": "affected",
"version": "7.5.21.21732"
},
{
"status": "affected",
"version": "8.4.5.30483"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-01T16:27:38.657Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-clamav-88cFYyxR",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
}
],
"source": {
"advisory": "cisco-sa-clamav-88cFYyxR",
"defects": [
"CSCwt62774"
],
"discovery": "EXTERNAL"
},
"title": "ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20213",
"datePublished": "2026-07-01T16:27:38.657Z",
"dateReserved": "2025-10-08T11:59:15.398Z",
"dateUpdated": "2026-07-01T17:25:08.998Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-20213",
"date": "2026-07-22",
"epss": "0.00463",
"percentile": "0.3755"
},
"microsoft_vex": {
"current_release_date": "2026-07-11T01:01:22.000Z",
"cve": "CVE-2026-20213",
"id": "msrc_CVE-2026-20213",
"initial_release_date": "2026-07-02T00:00:00.000Z",
"product_status:known_affected": "1",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-20213.json",
"version": "1"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-20213\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2026-07-01T17:16:29.460\",\"lastModified\":\"2026-07-09T17:56:55.537\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\\r\\n\\r\\nThis vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.\"}],\"affected\":[{\"source\":\"psirt@cisco.com\",\"affectedData\":[{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Endpoint\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"6.2.19\",\"status\":\"affected\"},{\"version\":\"7.3.3\",\"status\":\"affected\"},{\"version\":\"7.2.13\",\"status\":\"affected\"},{\"version\":\"6.1.5\",\"status\":\"affected\"},{\"version\":\"6.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.5\",\"status\":\"affected\"},{\"version\":\"7.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.7\",\"status\":\"affected\"},{\"version\":\"7.1.1\",\"status\":\"affected\"},{\"version\":\"6.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.9\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"6.1.7\",\"status\":\"affected\"},{\"version\":\"7.2.11\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.1.5\",\"status\":\"affected\"},{\"version\":\"6.3.3\",\"status\":\"affected\"},{\"version\":\"7.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.1.9\",\"status\":\"affected\"},{\"version\":\"6.0.9\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"6.0.7\",\"status\":\"affected\"},{\"version\":\"6.3.7\",\"status\":\"affected\"},{\"version\":\"1.12.3\",\"status\":\"affected\"},{\"version\":\"1.8.0\",\"status\":\"affected\"},{\"version\":\"1.11.1\",\"status\":\"affected\"},{\"version\":\"1.12.4\",\"status\":\"affected\"},{\"version\":\"1.10.0\",\"status\":\"affected\"},{\"version\":\"1.12.0\",\"status\":\"affected\"},{\"version\":\"1.8.1\",\"status\":\"affected\"},{\"version\":\"1.10.1\",\"status\":\"affected\"},{\"version\":\"1.12.1\",\"status\":\"affected\"},{\"version\":\"1.12.6\",\"status\":\"affected\"},{\"version\":\"1.14.0\",\"status\":\"affected\"},{\"version\":\"1.10.2\",\"status\":\"affected\"},{\"version\":\"1.12.7\",\"status\":\"affected\"},{\"version\":\"1.12.2\",\"status\":\"affected\"},{\"version\":\"1.6.0\",\"status\":\"affected\"},{\"version\":\"1.9.0\",\"status\":\"affected\"},{\"version\":\"1.11.0\",\"status\":\"affected\"},{\"version\":\"1.7.0\",\"status\":\"affected\"},{\"version\":\"1.13.0\",\"status\":\"affected\"},{\"version\":\"1.8.4\",\"status\":\"affected\"},{\"version\":\"1.13.1\",\"status\":\"affected\"},{\"version\":\"1.9.1\",\"status\":\"affected\"},{\"version\":\"1.12.5\",\"status\":\"affected\"},{\"version\":\"1.13.2\",\"status\":\"affected\"},{\"version\":\"8.1.7.21512\",\"status\":\"affected\"},{\"version\":\"8.1.7\",\"status\":\"affected\"},{\"version\":\"8.1.5\",\"status\":\"affected\"},{\"version\":\"8.1.3.21242\",\"status\":\"affected\"},{\"version\":\"8.1.3\",\"status\":\"affected\"},{\"version\":\"8.1.5.21322\",\"status\":\"affected\"},{\"version\":\"8.1.7.21417\",\"status\":\"affected\"},{\"version\":\"1.14.1\",\"status\":\"affected\"},{\"version\":\"1.15.1\",\"status\":\"affected\"},{\"version\":\"1.15.2\",\"status\":\"affected\"},{\"version\":\"1.15.3\",\"status\":\"affected\"},{\"version\":\"1.15.4\",\"status\":\"affected\"},{\"version\":\"1.15.5\",\"status\":\"affected\"},{\"version\":\"1.15.6\",\"status\":\"affected\"},{\"version\":\"1.16.0\",\"status\":\"affected\"},{\"version\":\"1.16.1\",\"status\":\"affected\"},{\"version\":\"1.16.2\",\"status\":\"affected\"},{\"version\":\"1.16.3\",\"status\":\"affected\"},{\"version\":\"1.18.0\",\"status\":\"affected\"},{\"version\":\"1.18.1\",\"status\":\"affected\"},{\"version\":\"1.20.0\",\"status\":\"affected\"},{\"version\":\"1.21.0\",\"status\":\"affected\"},{\"version\":\"1.21.1\",\"status\":\"affected\"},{\"version\":\"1.21.2\",\"status\":\"affected\"},{\"version\":\"1.21.3\",\"status\":\"affected\"},{\"version\":\"1.22.0\",\"status\":\"affected\"},{\"version\":\"1.22.1\",\"status\":\"affected\"},{\"version\":\"1.22.2\",\"status\":\"affected\"},{\"version\":\"1.22.3\",\"status\":\"affected\"},{\"version\":\"1.22.4\",\"status\":\"affected\"},{\"version\":\"1.24.0\",\"status\":\"affected\"},{\"version\":\"1.24.1\",\"status\":\"affected\"},{\"version\":\"1.24.2\",\"status\":\"affected\"},{\"version\":\"1.24.3\",\"status\":\"affected\"},{\"version\":\"1.24.4\",\"status\":\"affected\"},{\"version\":\"1.26.0\",\"status\":\"affected\"},{\"version\":\"1.24.5\",\"status\":\"affected\"},{\"version\":\"1.26.1\",\"status\":\"affected\"},{\"version\":\"1.27.0\",\"status\":\"affected\"},{\"version\":\"1.15.0\",\"status\":\"affected\"},{\"version\":\"1.17.0\",\"status\":\"affected\"},{\"version\":\"1.17.1\",\"status\":\"affected\"},{\"version\":\"1.17.2\",\"status\":\"affected\"},{\"version\":\"1.19.0\",\"status\":\"affected\"},{\"version\":\"1.20.1\",\"status\":\"affected\"},{\"version\":\"1.20.2\",\"status\":\"affected\"},{\"version\":\"1.20.3\",\"status\":\"affected\"},{\"version\":\"1.20.4\",\"status\":\"affected\"},{\"version\":\"1.20.5\",\"status\":\"affected\"},{\"version\":\"1.20.6\",\"status\":\"affected\"},{\"version\":\"1.23.0\",\"status\":\"affected\"},{\"version\":\"1.23.1\",\"status\":\"affected\"},{\"version\":\"1.20.7\",\"status\":\"affected\"},{\"version\":\"1.20.8\",\"status\":\"affected\"},{\"version\":\"1.25.0\",\"status\":\"affected\"},{\"version\":\"1.25.1\",\"status\":\"affected\"},{\"version\":\"1.25.2\",\"status\":\"affected\"},{\"version\":\"1.27.1\",\"status\":\"affected\"},{\"version\":\"1.27.2\",\"status\":\"affected\"},{\"version\":\"7.3.13\",\"status\":\"affected\"},{\"version\":\"7.3.15\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"},{\"version\":\"7.4.1.20425\",\"status\":\"affected\"},{\"version\":\"7.4.1.20439\",\"status\":\"affected\"},{\"version\":\"7.4.3\",\"status\":\"affected\"},{\"version\":\"7.4.3.20679\",\"status\":\"affected\"},{\"version\":\"7.4.5\",\"status\":\"affected\"},{\"version\":\"7.5.1.20813\",\"status\":\"affected\"},{\"version\":\"7.5.1.20833\",\"status\":\"affected\"},{\"version\":\"7.5.3\",\"status\":\"affected\"},{\"version\":\"7.5.5\",\"status\":\"affected\"},{\"version\":\"8.0.1.21160\",\"status\":\"affected\"},{\"version\":\"8.0.1.21164\",\"status\":\"affected\"},{\"version\":\"7.5.7\",\"status\":\"affected\"},{\"version\":\"7.5.9\",\"status\":\"affected\"},{\"version\":\"7.5.11\",\"status\":\"affected\"},{\"version\":\"8.1.7.21585\",\"status\":\"affected\"},{\"version\":\"7.5.13.21586\",\"status\":\"affected\"},{\"version\":\"7.5.13.21598\",\"status\":\"affected\"},{\"version\":\"8.2.1.21612\",\"status\":\"affected\"},{\"version\":\"8.2.1.21650\",\"status\":\"affected\"},{\"version\":\"7.5.15.21611\",\"status\":\"affected\"},{\"version\":\"7.5.17.21680\",\"status\":\"affected\"},{\"version\":\"8.2.3.30119\",\"status\":\"affected\"},{\"version\":\"8.2.4.30130\",\"status\":\"affected\"},{\"version\":\"8.4.0\",\"status\":\"affected\"},{\"version\":\"7.5.19\",\"status\":\"affected\"},{\"version\":\"8.4.1.30298\",\"status\":\"affected\"},{\"version\":\"8.4.2.30317\",\"status\":\"affected\"},{\"version\":\"8.4.1.30307\",\"status\":\"affected\"},{\"version\":\"7.5.20\",\"status\":\"affected\"},{\"version\":\"8.4.3\",\"status\":\"affected\"},{\"version\":\"8.4.4.30419\",\"status\":\"affected\"},{\"version\":\"8.4.4.30467\",\"status\":\"affected\"},{\"version\":\"7.5.21.21732\",\"status\":\"affected\"},{\"version\":\"8.4.5.30483\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-07-01T17:18:10.967118Z\",\"id\":\"CVE-2026-20213\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-120\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:macos:*:*\",\"versionEndExcluding\":\"1.27.2\",\"matchCriteriaId\":\"E534D1FF-B590-40F3-9874-AC2BDA807087\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:linux:*:*\",\"versionEndExcluding\":\"1.29.0\",\"matchCriteriaId\":\"CB2B4CBA-534A-4111-8920-8580B12C4F46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*\",\"versionEndExcluding\":\"8.6.2\",\"matchCriteriaId\":\"4EB7F99A-01AB-44EE-B682-5E2C9E7D2A4B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.4.5\",\"matchCriteriaId\":\"CD23E971-4735-4C28-BFE1-AB807630F2EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.5.0\",\"versionEndExcluding\":\"1.5.3\",\"matchCriteriaId\":\"5CC3C470-BBC6-449E-80F1-F9E762442D3C\"}]}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
"redhat_vex": {
"current_release_date": "2026-07-03T16:16:31+00:00",
"cve": "CVE-2026-20213",
"id": "CVE-2026-20213",
"initial_release_date": "2026-07-01T16:27:38.657000+00:00",
"product_status:known_not_affected": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "ClamAV: ClamAV: Denial of Service via crafted Portable Executable (PE) files",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-20213.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-15T05:35:50Z",
"cve": "CVE-2026-20213",
"id": "CVE-2026-20213",
"initial_release_date": "2026-07-03T03:26:06Z",
"product_status:known_affected": "54",
"product_status:recommended": "182",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-20213",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-20213.json",
"version": "6"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-20213\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-01T17:18:10.967118Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-01T17:21:04.441Z\"}}], \"cna\": {\"title\": \"ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability\", \"source\": {\"defects\": [\"CSCwt62774\"], \"advisory\": \"cisco-sa-clamav-88cFYyxR\", \"discovery\": \"EXTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Secure Endpoint\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.0.5\"}, {\"status\": \"affected\", \"version\": \"6.2.19\"}, {\"status\": \"affected\", \"version\": \"7.3.3\"}, {\"status\": \"affected\", \"version\": \"7.2.13\"}, {\"status\": \"affected\", \"version\": \"6.1.5\"}, {\"status\": \"affected\", \"version\": \"6.3.1\"}, {\"status\": \"affected\", \"version\": \"6.2.5\"}, {\"status\": \"affected\", \"version\": \"7.3.5\"}, {\"status\": \"affected\", \"version\": \"6.2.1\"}, {\"status\": \"affected\", \"version\": \"7.2.7\"}, {\"status\": \"affected\", \"version\": \"7.1.1\"}, {\"status\": \"affected\", \"version\": \"6.3.5\"}, {\"status\": \"affected\", \"version\": \"6.2.9\"}, {\"status\": \"affected\", \"version\": \"7.3.1\"}, {\"status\": \"affected\", \"version\": \"6.1.7\"}, {\"status\": \"affected\", \"version\": \"7.2.11\"}, {\"status\": \"affected\", \"version\": \"7.2.3\"}, {\"status\": \"affected\", \"version\": \"7.1.5\"}, {\"status\": \"affected\", \"version\": \"6.3.3\"}, {\"status\": \"affected\", \"version\": \"7.3.9\"}, {\"status\": \"affected\", \"version\": \"6.2.3\"}, {\"status\": \"affected\", \"version\": \"6.1.9\"}, {\"status\": \"affected\", \"version\": \"6.0.9\"}, {\"status\": \"affected\", \"version\": \"7.2.5\"}, {\"status\": \"affected\", \"version\": \"6.0.7\"}, {\"status\": \"affected\", \"version\": \"6.3.7\"}, {\"status\": \"affected\", \"version\": \"1.12.3\"}, {\"status\": \"affected\", \"version\": \"1.8.0\"}, {\"status\": \"affected\", \"version\": \"1.11.1\"}, {\"status\": \"affected\", \"version\": \"1.12.4\"}, {\"status\": \"affected\", \"version\": \"1.10.0\"}, {\"status\": \"affected\", \"version\": \"1.12.0\"}, {\"status\": \"affected\", \"version\": \"1.8.1\"}, {\"status\": \"affected\", \"version\": \"1.10.1\"}, {\"status\": \"affected\", \"version\": \"1.12.1\"}, {\"status\": \"affected\", \"version\": \"1.12.6\"}, {\"status\": \"affected\", \"version\": \"1.14.0\"}, {\"status\": \"affected\", \"version\": \"1.10.2\"}, {\"status\": \"affected\", \"version\": \"1.12.7\"}, {\"status\": \"affected\", \"version\": \"1.12.2\"}, {\"status\": \"affected\", \"version\": \"1.6.0\"}, {\"status\": \"affected\", \"version\": \"1.9.0\"}, {\"status\": \"affected\", \"version\": \"1.11.0\"}, {\"status\": \"affected\", \"version\": \"1.7.0\"}, {\"status\": \"affected\", \"version\": \"1.13.0\"}, {\"status\": \"affected\", \"version\": \"1.8.4\"}, {\"status\": \"affected\", \"version\": \"1.13.1\"}, {\"status\": \"affected\", \"version\": \"1.9.1\"}, {\"status\": \"affected\", \"version\": \"1.12.5\"}, {\"status\": \"affected\", \"version\": \"1.13.2\"}, {\"status\": \"affected\", \"version\": \"8.1.7.21512\"}, {\"status\": \"affected\", \"version\": \"8.1.7\"}, {\"status\": \"affected\", \"version\": \"8.1.5\"}, {\"status\": \"affected\", \"version\": \"8.1.3.21242\"}, {\"status\": \"affected\", \"version\": \"8.1.3\"}, {\"status\": \"affected\", \"version\": \"8.1.5.21322\"}, {\"status\": \"affected\", \"version\": \"8.1.7.21417\"}, {\"status\": \"affected\", \"version\": \"1.14.1\"}, {\"status\": \"affected\", \"version\": \"1.15.1\"}, {\"status\": \"affected\", \"version\": \"1.15.2\"}, {\"status\": \"affected\", \"version\": \"1.15.3\"}, {\"status\": \"affected\", \"version\": \"1.15.4\"}, {\"status\": \"affected\", \"version\": \"1.15.5\"}, {\"status\": \"affected\", \"version\": \"1.15.6\"}, {\"status\": \"affected\", \"version\": \"1.16.0\"}, {\"status\": \"affected\", \"version\": \"1.16.1\"}, {\"status\": \"affected\", \"version\": \"1.16.2\"}, {\"status\": \"affected\", \"version\": \"1.16.3\"}, {\"status\": \"affected\", \"version\": \"1.18.0\"}, {\"status\": \"affected\", \"version\": \"1.18.1\"}, {\"status\": \"affected\", \"version\": \"1.20.0\"}, {\"status\": \"affected\", \"version\": \"1.21.0\"}, {\"status\": \"affected\", \"version\": \"1.21.1\"}, {\"status\": \"affected\", \"version\": \"1.21.2\"}, {\"status\": \"affected\", \"version\": \"1.21.3\"}, {\"status\": \"affected\", \"version\": \"1.22.0\"}, {\"status\": \"affected\", \"version\": \"1.22.1\"}, {\"status\": \"affected\", \"version\": \"1.22.2\"}, {\"status\": \"affected\", \"version\": \"1.22.3\"}, {\"status\": \"affected\", \"version\": \"1.22.4\"}, {\"status\": \"affected\", \"version\": \"1.24.0\"}, {\"status\": \"affected\", \"version\": \"1.24.1\"}, {\"status\": \"affected\", \"version\": \"1.24.2\"}, {\"status\": \"affected\", \"version\": \"1.24.3\"}, {\"status\": \"affected\", \"version\": \"1.24.4\"}, {\"status\": \"affected\", \"version\": \"1.26.0\"}, {\"status\": \"affected\", \"version\": \"1.24.5\"}, {\"status\": \"affected\", \"version\": \"1.26.1\"}, {\"status\": \"affected\", \"version\": \"1.27.0\"}, {\"status\": \"affected\", \"version\": \"1.15.0\"}, {\"status\": \"affected\", \"version\": \"1.17.0\"}, {\"status\": \"affected\", \"version\": \"1.17.1\"}, {\"status\": \"affected\", \"version\": \"1.17.2\"}, {\"status\": \"affected\", \"version\": \"1.19.0\"}, {\"status\": \"affected\", \"version\": \"1.20.1\"}, {\"status\": \"affected\", \"version\": \"1.20.2\"}, {\"status\": \"affected\", \"version\": \"1.20.3\"}, {\"status\": \"affected\", \"version\": \"1.20.4\"}, {\"status\": \"affected\", \"version\": \"1.20.5\"}, {\"status\": \"affected\", \"version\": \"1.20.6\"}, {\"status\": \"affected\", \"version\": \"1.23.0\"}, {\"status\": \"affected\", \"version\": \"1.23.1\"}, {\"status\": \"affected\", \"version\": \"1.20.7\"}, {\"status\": \"affected\", \"version\": \"1.20.8\"}, {\"status\": \"affected\", \"version\": \"1.25.0\"}, {\"status\": \"affected\", \"version\": \"1.25.1\"}, {\"status\": \"affected\", \"version\": \"1.25.2\"}, {\"status\": \"affected\", \"version\": \"1.27.1\"}, {\"status\": \"affected\", \"version\": \"1.27.2\"}, {\"status\": \"affected\", \"version\": \"7.3.13\"}, {\"status\": \"affected\", \"version\": \"7.3.15\"}, {\"status\": \"affected\", \"version\": \"7.4.1\"}, {\"status\": \"affected\", \"version\": \"7.4.1.20425\"}, {\"status\": \"affected\", \"version\": \"7.4.1.20439\"}, {\"status\": \"affected\", \"version\": \"7.4.3\"}, {\"status\": \"affected\", \"version\": \"7.4.3.20679\"}, {\"status\": \"affected\", \"version\": \"7.4.5\"}, {\"status\": \"affected\", \"version\": \"7.5.1.20813\"}, {\"status\": \"affected\", \"version\": \"7.5.1.20833\"}, {\"status\": \"affected\", \"version\": \"7.5.3\"}, {\"status\": \"affected\", \"version\": \"7.5.5\"}, {\"status\": \"affected\", \"version\": \"8.0.1.21160\"}, {\"status\": \"affected\", \"version\": \"8.0.1.21164\"}, {\"status\": \"affected\", \"version\": \"7.5.7\"}, {\"status\": \"affected\", \"version\": \"7.5.9\"}, {\"status\": \"affected\", \"version\": \"7.5.11\"}, {\"status\": \"affected\", \"version\": \"8.1.7.21585\"}, {\"status\": \"affected\", \"version\": \"7.5.13.21586\"}, {\"status\": \"affected\", \"version\": \"7.5.13.21598\"}, {\"status\": \"affected\", \"version\": \"8.2.1.21612\"}, {\"status\": \"affected\", \"version\": \"8.2.1.21650\"}, {\"status\": \"affected\", \"version\": \"7.5.15.21611\"}, {\"status\": \"affected\", \"version\": \"7.5.17.21680\"}, {\"status\": \"affected\", \"version\": \"8.2.3.30119\"}, {\"status\": \"affected\", \"version\": \"8.2.4.30130\"}, {\"status\": \"affected\", \"version\": \"8.4.0\"}, {\"status\": \"affected\", \"version\": \"7.5.19\"}, {\"status\": \"affected\", \"version\": \"8.4.1.30298\"}, {\"status\": \"affected\", \"version\": \"8.4.2.30317\"}, {\"status\": \"affected\", \"version\": \"8.4.1.30307\"}, {\"status\": \"affected\", \"version\": \"7.5.20\"}, {\"status\": \"affected\", \"version\": \"8.4.3\"}, {\"status\": \"affected\", \"version\": \"8.4.4.30419\"}, {\"status\": \"affected\", \"version\": \"8.4.4.30467\"}, {\"status\": \"affected\", \"version\": \"7.5.21.21732\"}, {\"status\": \"affected\", \"version\": \"8.4.5.30483\"}], \"defaultStatus\": \"unknown\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR\", \"name\": \"cisco-sa-clamav-88cFYyxR\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\\r\\n\\r\\nThis vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-120\", \"description\": \"Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2026-07-01T16:27:38.657Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-20213\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-01T17:25:08.998Z\", \"dateReserved\": \"2025-10-08T11:59:15.398Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2026-07-01T16:27:38.657Z\", \"assignerShortName\": \"cisco\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2026-AVI-0824
Vulnerability from certfr_avis - Published: 2026-07-02 - Updated: 2026-07-02
De multiples vulnérabilités ont été découvertes dans ClamAV. Elles permettent à un attaquant de provoquer un déni de service et un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "ClamAV versions ant\u00e9rieures \u00e0 1.4.5",
"product": {
"name": "ClamAV",
"vendor": {
"name": "ClamAV",
"scada": false
}
}
},
{
"description": "ClamAV versions 1.5.x ant\u00e9rieures \u00e0 1.5.3",
"product": {
"name": "ClamAV",
"vendor": {
"name": "ClamAV",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-20216",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20216"
},
{
"name": "CVE-2026-20243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20243"
},
{
"name": "CVE-2026-20215",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20215"
},
{
"name": "CVE-2026-20213",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20213"
},
{
"name": "CVE-2026-20214",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20214"
},
{
"name": "CVE-2026-20217",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20217"
},
{
"name": "CVE-2026-20244",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20244"
},
{
"name": "CVE-2026-41676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41676"
}
],
"initial_release_date": "2026-07-02T00:00:00",
"last_revision_date": "2026-07-02T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0824",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-02T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "D\u00e9ni de service"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans ClamAV. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans ClamAV",
"vendor_advisories": [
{
"published_at": "2026-07-01",
"title": "Bulletin de s\u00e9curit\u00e9 ClamAV clamav-153-and-145-security-patch",
"url": "https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html"
}
]
}
CERTFR-2026-AVI-0825
Vulnerability from certfr_avis - Published: 2026-07-02 - Updated: 2026-07-02
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Elles permettent à un attaquant de provoquer un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Cisco | Secure Endpoint | Secure Endpoint Private Cloud versions antérieures à 4.2.8 | ||
| Cisco | Secure Endpoint | Secure Endpoint Connector versions antérieures à 1.27.21 pour Mac | ||
| Cisco | Secure Endpoint | Secure Endpoint Connector versions antérieures à 1.29.01 pour Linux | ||
| Cisco | N/A | Catalyst Center versions 2.3.7 antérieures à 2.3.7.11-VA GSMU100 | ||
| Cisco | Secure Endpoint | Secure Endpoint Connector versions antérieures à 8.6.21 pour Windows | ||
| Cisco | N/A | Catalyst Center versions 3.1 antérieures à 3.1.6 GSMU200 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Secure Endpoint Private Cloud versions ant\u00e9rieures \u00e0 4.2.8",
"product": {
"name": "Secure Endpoint",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure Endpoint Connector versions ant\u00e9rieures \u00e0 1.27.21 pour Mac",
"product": {
"name": "Secure Endpoint",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure Endpoint Connector versions ant\u00e9rieures \u00e0 1.29.01 pour Linux",
"product": {
"name": "Secure Endpoint",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst Center versions 2.3.7 ant\u00e9rieures \u00e0 2.3.7.11-VA GSMU100",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure Endpoint Connector versions ant\u00e9rieures \u00e0 8.6.21 pour Windows",
"product": {
"name": "Secure Endpoint",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst Center versions 3.1 ant\u00e9rieures \u00e0 3.1.6 GSMU200",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-20216",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20216"
},
{
"name": "CVE-2026-20243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20243"
},
{
"name": "CVE-2026-20215",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20215"
},
{
"name": "CVE-2026-20213",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20213"
},
{
"name": "CVE-2026-20214",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20214"
},
{
"name": "CVE-2026-20217",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20217"
},
{
"name": "CVE-2026-20244",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20244"
},
{
"name": "CVE-2026-20191",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20191"
}
],
"initial_release_date": "2026-07-02T00:00:00",
"last_revision_date": "2026-07-02T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0825",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-02T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
"vendor_advisories": [
{
"published_at": "2026-07-01",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-clamav-88cFYyxR",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
},
{
"published_at": "2026-07-01",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-catc-file-read-wLH2vf8X",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X"
}
]
}
CERTFR-2026-AVI-0873
Vulnerability from certfr_avis - Published: 2026-07-15 - Updated: 2026-07-15
De multiples vulnérabilités ont été découvertes dans Microsoft Azure Linux. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | Azure Linux | azl3 libXfont2 2.0.6-1 versions antérieures à 2.0.8-1 | ||
| Microsoft | Azure Linux | azl3 telegraf 1.31.0-23 versions antérieures à 1.31.0-25 | ||
| Microsoft | Azure Linux | azl3 clamav 1.5.2-3 versions antérieures à 1.5.3-1 | ||
| Microsoft | Azure Linux | azl3 glib 2.78.6-9 versions antérieures à 2.78.6-10 | ||
| Microsoft | Azure Linux | azl3 mtr 0.95-3 versions antérieures à 0.95-4 | ||
| Microsoft | Azure Linux | azl3 xorg-x11-server-Xwayland 24.1.12-1 versions antérieures à 24.1.13-1 | ||
| Microsoft | Azure Linux | azl3 python-msgpack 1.0.5-2 versions antérieures à 1.0.5-3 | ||
| Microsoft | Azure Linux | azl3 curl 8.11.1-9 versions antérieures à 8.11.1-10 | ||
| Microsoft | Azure Linux | azl3 erlang 26.2.5.21-2 versions antérieures à 26.2.5.21-3 | ||
| Microsoft | Azure Linux | azl3 openssh 9.8p1-8 versions antérieures à 9.8p1-9 | ||
| Microsoft | Azure Linux | azl3 python-setuptools 69.0.3-5 versions antérieures à 69.0.3-6 | ||
| Microsoft | Azure Linux | azl3 nodejs 24.17.0-1 versions antérieures à 24.17.0-2 | ||
| Microsoft | Azure Linux | azl3 vim 9.2.0735-1 versions antérieures à 9.2.0782-1 | ||
| Microsoft | Azure Linux | azl3 keras 3.3.3-7 versions antérieures à 3.3.3-8 | ||
| Microsoft | Azure Linux | azl3 perl-DBI 1.643-5 versions antérieures à 1.650-1 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "azl3 libXfont2 2.0.6-1 versions ant\u00e9rieures \u00e0 2.0.8-1",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 telegraf 1.31.0-23 versions ant\u00e9rieures \u00e0 1.31.0-25",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 clamav 1.5.2-3 versions ant\u00e9rieures \u00e0 1.5.3-1",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 glib 2.78.6-9 versions ant\u00e9rieures \u00e0 2.78.6-10",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 mtr 0.95-3 versions ant\u00e9rieures \u00e0 0.95-4",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 xorg-x11-server-Xwayland 24.1.12-1 versions ant\u00e9rieures \u00e0 24.1.13-1",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 python-msgpack 1.0.5-2 versions ant\u00e9rieures \u00e0 1.0.5-3",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 curl 8.11.1-9 versions ant\u00e9rieures \u00e0 8.11.1-10",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 erlang 26.2.5.21-2 versions ant\u00e9rieures \u00e0 26.2.5.21-3",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 openssh 9.8p1-8 versions ant\u00e9rieures \u00e0 9.8p1-9",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 python-setuptools 69.0.3-5 versions ant\u00e9rieures \u00e0 69.0.3-6",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 nodejs 24.17.0-1 versions ant\u00e9rieures \u00e0 24.17.0-2",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 vim 9.2.0735-1 versions ant\u00e9rieures \u00e0 9.2.0782-1",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 keras 3.3.3-7 versions ant\u00e9rieures \u00e0 3.3.3-8",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 perl-DBI 1.643-5 versions ant\u00e9rieures \u00e0 1.650-1",
"product": {
"name": "Azure Linux",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-14380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14380"
},
{
"name": "CVE-2026-14461",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14461"
},
{
"name": "CVE-2026-59996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59996"
},
{
"name": "CVE-2026-59995",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59995"
},
{
"name": "CVE-2026-59999",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59999"
},
{
"name": "CVE-2026-20216",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20216"
},
{
"name": "CVE-2026-58013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58013"
},
{
"name": "CVE-2026-8926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8926"
},
{
"name": "CVE-2026-20243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20243"
},
{
"name": "CVE-2026-8458",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8458"
},
{
"name": "CVE-2026-14739",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14739"
},
{
"name": "CVE-2026-58015",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58015"
},
{
"name": "CVE-2026-56000",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56000"
},
{
"name": "CVE-2026-58014",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58014"
},
{
"name": "CVE-2026-20215",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20215"
},
{
"name": "CVE-2026-58012",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58012"
},
{
"name": "CVE-2026-59890",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59890"
},
{
"name": "CVE-2026-10536",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10536"
},
{
"name": "CVE-2026-20213",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20213"
},
{
"name": "CVE-2026-8932",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8932"
},
{
"name": "CVE-2026-11525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11525"
},
{
"name": "CVE-2026-59997",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59997"
},
{
"name": "CVE-2026-58010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58010"
},
{
"name": "CVE-2026-12064",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12064"
},
{
"name": "CVE-2026-12480",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12480"
},
{
"name": "CVE-2026-20214",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20214"
},
{
"name": "CVE-2026-60002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60002"
},
{
"name": "CVE-2026-9079",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9079"
},
{
"name": "CVE-2026-56003",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56003"
},
{
"name": "CVE-2026-59856",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59856"
},
{
"name": "CVE-2026-20217",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20217"
},
{
"name": "CVE-2026-58011",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58011"
},
{
"name": "CVE-2026-58016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58016"
},
{
"name": "CVE-2026-60001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60001"
},
{
"name": "CVE-2026-14740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14740"
},
{
"name": "CVE-2026-20244",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20244"
},
{
"name": "CVE-2026-57585",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57585"
},
{
"name": "CVE-2026-8927",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8927"
},
{
"name": "CVE-2026-60000",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60000"
},
{
"name": "CVE-2026-54908",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54908"
},
{
"name": "CVE-2026-56002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56002"
},
{
"name": "CVE-2026-54886",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54886"
},
{
"name": "CVE-2026-56001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56001"
},
{
"name": "CVE-2026-8286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8286"
}
],
"initial_release_date": "2026-07-15T00:00:00",
"last_revision_date": "2026-07-15T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0873",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Azure Linux. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Azure Linux",
"vendor_advisories": [
{
"published_at": "2026-07-01",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58013",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58013"
},
{
"published_at": "2026-07-04",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-9079",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9079"
},
{
"published_at": "2026-07-09",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-56001",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56001"
},
{
"published_at": "2026-07-11",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20243",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20243"
},
{
"published_at": "2026-07-09",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-60001",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60001"
},
{
"published_at": "2026-07-11",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20214",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20214"
},
{
"published_at": "2026-07-04",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-8927",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8927"
},
{
"published_at": "2026-07-11",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20216",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20216"
},
{
"published_at": "2026-07-09",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-54908",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54908"
},
{
"published_at": "2026-07-01",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58011",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58011"
},
{
"published_at": "2026-07-01",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58012",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58012"
},
{
"published_at": "2026-07-04",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-8926",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8926"
},
{
"published_at": "2026-07-09",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-59997",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59997"
},
{
"published_at": "2026-07-09",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-56002",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56002"
},
{
"published_at": "2026-07-09",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-60002",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60002"
},
{
"published_at": "2026-07-04",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-8932",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8932"
},
{
"published_at": "2026-07-03",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-57585",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57585"
},
{
"published_at": "2026-07-04",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-12064",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12064"
},
{
"published_at": "2026-07-11",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20215",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20215"
},
{
"published_at": "2026-07-09",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-56000",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56000"
},
{
"published_at": "2026-07-09",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-56003",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56003"
},
{
"published_at": "2026-07-11",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-14380",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14380"
},
{
"published_at": "2026-07-01",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58014",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58014"
},
{
"published_at": "2026-07-04",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-8286",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8286"
},
{
"published_at": "2026-07-01",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58015",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58015"
},
{
"published_at": "2026-07-04",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-8458",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8458"
},
{
"published_at": "2026-06-27",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-11525",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11525"
},
{
"published_at": "2026-07-09",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-59996",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59996"
},
{
"published_at": "2026-07-04",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-10536",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10536"
},
{
"published_at": "2026-07-11",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20213",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20213"
},
{
"published_at": "2026-07-09",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-59999",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59999"
},
{
"published_at": "2026-07-09",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-59995",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59995"
},
{
"published_at": "2026-07-11",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20244",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20244"
},
{
"published_at": "2026-07-11",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-14740",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14740"
},
{
"published_at": "2026-07-11",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-14461",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14461"
},
{
"published_at": "2026-07-01",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58016",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58016"
},
{
"published_at": "2026-07-07",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-12480",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12480"
},
{
"published_at": "2026-07-01",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58010",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58010"
},
{
"published_at": "2026-07-11",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-59856",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59856"
},
{
"published_at": "2026-07-09",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-60000",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60000"
},
{
"published_at": "2026-07-11",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-14739",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14739"
},
{
"published_at": "2026-07-07",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-54886",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54886"
},
{
"published_at": "2026-07-11",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-59890",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59890"
},
{
"published_at": "2026-07-11",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20217",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20217"
}
]
}
CISCO-SA-CLAMAV-88CFYYXR
Vulnerability from csaf_cisco - Published: 2026-07-01 16:00 - Updated: 2026-07-02 20:52Summary
ClamAV Vulnerabilities Affecting Cisco Products: July 2026
Notes
Summary: Multiple vulnerabilities in ClamAV could allow a remote attacker to cause a denial of service (DoS) condition, interrupting scanning operations.
For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.
For additional information on these vulnerabilities in ClamAV, see the ClamAV blog ["https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html"].
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
Notes:
The Security Impact Rating (SIR) for these vulnerabilities is High for Windows-based platforms only because those platforms run the ClamAV scanning process in a privileged security context. The platforms that are highly impacted include Cisco Secure Endpoint Connector for Windows.
The SIR for these vulnerabilities is Medium on other platforms, including Linux and Mac platforms, because those platforms run the ClamAV scanning process in a lower-privileged security context. The affected platforms include Secure Endpoint Connector for Linux and Mac.
Cisco Secure Endpoint Private Cloud itself is not impacted by these vulnerabilities. However, the Cisco Secure Endpoint Connector software that is distributed from the device is impacted.
Vulnerable Products: The following table lists Cisco products that are affected by the vulnerabilities that are described in this advisory. Customers should refer to the associated Cisco bug IDs for further details.
Affected Cisco Software Platform CVSS Base Score Security Impact Rating Cisco Bug ID First Fixed Release Secure Endpoint Connector for Linux 5.3 Medium CSCwt81503 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81503"] 1.29.0 Secure Endpoint Connector for Mac 5.3 Medium CSCwt81504 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81504"] 1.27.2 Secure Endpoint Connector for Windows 7.5 High CSCwt81501 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81501"] 8.6.2 Secure Endpoint Private Cloud 0.0 No impact CSCwu55927 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwu55927"] 4.2.8 and later
Cisco products may be impacted differently depending on implementation and usage of ClamAV. For information on the effects of these vulnerabilities on specific Cisco products, see the Details ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR#details"] section of this advisory.
Products Confirmed Not Vulnerable: Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by these vulnerabilities.
Cisco has confirmed that these vulnerabilities do not affect the following Cisco products:
Secure Email Gateway
Secure Web Gateway
Details: The vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability. In addition, a software release that is affected by one of the vulnerabilities may not be affected by the other vulnerabilities.
Details about the vulnerabilities are as follows:
CVE-2026-20216: ClamAV InstallShield File Parsing DoS Vulnerability
A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.
This vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVE ID: CVE-2026-20216
Security Impact Rating (SIR): High
CVSS Base Score: 7.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ClamAV Memory Corruption Vulnerabilities
The following vulnerabilities, which have a SIR on ClamAV, affect Linux, Mac, and Windows-based platforms that are using ClamAV.
If an attacker exploits any of this class of vulnerability against affected devices that use Cisco Secure Endpoint Connector for Windows, the scanning engine process could be terminated and cause a DoS condition because the endpoint may become unresponsive and require manual intervention, such as a system reboot, to recover.
On Windows-based platforms, attackers have used similar vulnerabilities to achieve remote code execution. However, no evidence exists proving the potential for remote code execution for the vulnerabilities that are described in this advisory. In most circumstances, platform and memory protections prevent practical exploitation of these vulnerabilities for code execution, especially on systems with modern 64-bit architecture. Systems that are running legacy 32-bit Windows platforms are at higher risk for successful exploitation.
On Cisco Secure Endpoint Connector for Linux and Mac, the SIR is Medium. Exploitation of these vulnerabilities could cause the scanning engine process to terminate, delaying or preventing further scanning operations. However, overall system stability is not affected.
For information about vulnerability scoring and SIRs, see the Security Risk Assessment ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#SecurityRiskAssessment"] section of the Cisco Security Vulnerability Policy.
Cisco Secure Endpoint Connector, which is distributed from Cisco Secure Endpoint Private Cloud, is affected by these vulnerabilities. Cisco Secure Endpoint Private Cloud itself is not affected.
CVE-2026-20213: ClamAV PE File Format Processing Memory Corruption Vulnerability
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVE ID: CVE-2026-20213
Security Impact Rating (SIR): High
CVSS Base Score: 7.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVE-2026-20214: ClamAV FSG File Format Processing Memory Corruption Vulnerability
A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains portable executable content compressed with FSG to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVE ID: CVE-2026-20214
Security Impact Rating (SIR): High
CVSS Base Score: 7.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVE-2026-20215: ClamAV 7z File Format Processing Memory Corruption Vulnerability
A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in 7z files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains 7z content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVE ID: CVE-2026-20215
Security Impact Rating (SIR): High
CVSS Base Score: 7.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVE-2026-20217: ClamAV PESpin File Format Processing Memory Corruption Vulnerability
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVE ID: CVE-2026-20217
Security Impact Rating (SIR): High
CVSS Base Score: 7.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVE-2026-20243: ClamAV ALZ File Format Processing Memory Corruption Vulnerability
A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in ALZ files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains ALZ content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVE ID: CVE-2026-20243
Security Impact Rating (SIR): High
CVSS Base Score: 7.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVE-2026-20244: ClamAV DMG File Format Processing Memory Corruption Vulnerability
A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in DMG files during scanning, which may result in an integer overflow on 32-bit platforms only. An attacker could exploit this vulnerability by submitting a crafted file that contains DMG content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVE ID: CVE-2026-20244
Security Impact Rating (SIR): High
CVSS Base Score: 7.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Workarounds: There are no workarounds that address these vulnerabilities.
Fixed Software: Cisco considers any workarounds and mitigations (if applicable) to be temporary solutions until an upgrade to a fixed software release is available. To fully remediate these vulnerabilities and avoid future exposure as described in this advisory, Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.
Fixed Releases
Customers are advised to upgrade to an appropriate fixed software release ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"] as indicated in the following table:
Cisco Product Cisco Bug ID Fixed Release Availability Secure Endpoint Connector for Linux CSCwt81503 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81503"] 1.29.01 Secure Endpoint Connector for Mac CSCwt81504 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81504"] 1.27.21 Secure Endpoint Connector for Windows CSCwt81501 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81501"] 8.6.21 Secure Endpoint Private Cloud CSCwu55927 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwu55927"] 4.2.8 and later2
1. Updated releases of Cisco Secure Endpoint Connector are available through the Cisco Secure Endpoint portal. Depending on the configured policy, Cisco Secure Endpoint Connector will automatically update.
2. Affected releases of Cisco Secure Endpoint Connector clients for Cisco Secure Endpoint Private Cloud have been updated in the connector repository. Customers will get these connector updates through normal content update processes.
The Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.
Vulnerability Policy: To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.
Exploitation and Public Announcements: The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.
Source: Cisco would like to thank the following people for reporting these vulnerabilities:
David Pokora of Trail of Bits, working with Anthropic: CVE-2026-20213, CVE-2026-20214, and CVE-2026-20215
Calif.io in collaboration with Claude and Anthropic Research: CVE-2026-20213
Atuin - Automated Vulnerability Discovery Engine, Tianchu Chen of Tencent Xuanwu Lab: CVE-2026-20213, CVE-2026-20214, and CVE-2026-20217
Niv Moshe working with TrendAI Zero Day Initiative: CVE-2026-20215
Mizu: CVE-2026-20216
Yazdan Soltani: CVE-2026-20243
pawlok and barteq of the GetResponse Security Team: CVE-2026-20243
leduckhuong: CVE-2026-20243
Stanley John Tobias: CVE-2026-20244
Legal Disclaimer: SOFTWARE DOWNLOADS AND TECHNICAL SUPPORT
The Cisco Support and Downloads ["https://www.cisco.com/c/en/us/support/index.html"] page on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool. Please note that customers may download only software that was procured from Cisco directly or through a Cisco authorized reseller or partner and for which the license is still valid.
Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco Technical Assistance Center (TAC) ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"]. Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.
When considering software upgrades ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"], customers are advised to regularly consult the advisories ["https://www.cisco.com/go/psirt"] for the relevant Cisco products to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"] or their contracted maintenance providers.
LEGAL DISCLAIMER DETAILS
CISCO DOES NOT MAKE ANY EXPRESS OR IMPLIED GUARANTEES OR WARRANTIES OF ANY KIND, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, CISCO DOES NOT GUARANTEE THE ACCURACY OR COMPLETENESS OF THIS INFORMATION. THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.
Copies or summaries of the information contained in this Security Advisory may lack important information or contain factual errors. Customers are advised to visit the Cisco Security Advisories ["https://www.cisco.com/go/psirt"] page for the most recent version of this Security Advisory. The Cisco Product Security Incident Response Team (PSIRT) assesses only the affected and fixed release information that is documented in this advisory. See the Cisco Security Vulnerability Policy ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"] for more information.
7.5 (High)
7.5 (High)
7.5 (High)
7.5 (High)
7.5 (High)
7.5 (High)
7.5 (High)
References
14 references
| URL | Category |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/c… | self |
| https://sec.cloudapps.cisco.com/security/center/r… | external |
| https://blog.clamav.net/2026/07/clamav-153-and-14… | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/r… | external |
| https://sec.cloudapps.cisco.com/security/center/r… | external |
| http://www.cisco.com/web/about/security/psirt/sec… | external |
| https://www.cisco.com/c/en/us/support/index.html | external |
| https://www.cisco.com/c/en/us/support/web/tsd-cis… | external |
| https://www.cisco.com/go/psirt | external |
Acknowledgments
{
"document": {
"acknowledgments": [
{
"summary": "Cisco would like to thank the following people for reporting these vulnerabilities:\r\n\r\nDavid Pokora of Trail of Bits, working with Anthropic: CVE-2026-20213, CVE-2026-20214, and CVE-2026-20215\r\nCalif.io in collaboration with Claude and Anthropic Research: CVE-2026-20213\r\nAtuin - Automated Vulnerability Discovery Engine, Tianchu Chen of Tencent Xuanwu Lab: CVE-2026-20213, CVE-2026-20214, and CVE-2026-20217\r\nNiv Moshe working with TrendAI Zero Day Initiative: CVE-2026-20215\r\n\r\nMizu: CVE-2026-20216\r\n\r\nYazdan Soltani: CVE-2026-20243\r\npawlok and barteq of the GetResponse Security Team: CVE-2026-20243\r\nleduckhuong: CVE-2026-20243\r\n\r\nStanley John Tobias: CVE-2026-20244"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"notes": [
{
"category": "summary",
"text": "Multiple vulnerabilities in ClamAV could allow a remote attacker to cause a denial of service (DoS) condition, interrupting scanning operations.\r\n\r\nFor more information about these vulnerabilities, see the Details [\"#details\"] section of this advisory.\r\n\r\nFor additional information on these vulnerabilities in ClamAV, see the ClamAV blog [\"https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html\"].\r\n\r\nCisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.\r\n\r\nNotes:\r\n\r\nThe Security Impact Rating (SIR) for these vulnerabilities is High for Windows-based platforms only because those platforms run the ClamAV scanning process in a privileged security context. The platforms that are highly impacted include Cisco Secure Endpoint Connector for Windows.\r\nThe SIR for these vulnerabilities is Medium on other platforms, including Linux and Mac platforms, because those platforms run the ClamAV scanning process in a lower-privileged security context. The affected platforms include Secure Endpoint Connector for Linux and Mac.\r\nCisco Secure Endpoint Private Cloud itself is not impacted by these vulnerabilities. However, the Cisco Secure Endpoint Connector software that is distributed from the device is impacted.\r\n\r\n",
"title": "Summary"
},
{
"category": "general",
"text": "The following table lists Cisco products that are affected by the vulnerabilities that are described in this advisory. Customers should refer to the associated Cisco bug IDs for further details.\r\n Affected Cisco Software Platform CVSS Base Score Security Impact Rating Cisco Bug ID First Fixed Release Secure Endpoint Connector for Linux 5.3 Medium CSCwt81503 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81503\"] 1.29.0 Secure Endpoint Connector for Mac 5.3 Medium CSCwt81504 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81504\"] 1.27.2 Secure Endpoint Connector for Windows 7.5 High CSCwt81501 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81501\"] 8.6.2 Secure Endpoint Private Cloud 0.0 No impact CSCwu55927 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwu55927\"] 4.2.8 and later\r\nCisco products may be impacted differently depending on implementation and usage of ClamAV. For information on the effects of these vulnerabilities on specific Cisco products, see the Details [\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR#details\"] section of this advisory.",
"title": "Vulnerable Products"
},
{
"category": "general",
"text": "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by these vulnerabilities.\r\n\r\nCisco has confirmed that these vulnerabilities do not affect the following Cisco products:\r\n\r\nSecure Email Gateway\r\nSecure Web Gateway",
"title": "Products Confirmed Not Vulnerable"
},
{
"category": "general",
"text": "The vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability. In addition, a software release that is affected by one of the vulnerabilities may not be affected by the other vulnerabilities.\r\n\r\nDetails about the vulnerabilities are as follows:\r\n\r\nCVE-2026-20216: ClamAV InstallShield File Parsing DoS Vulnerability\r\n\r\nA vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nCVE ID: CVE-2026-20216\r\nSecurity Impact Rating (SIR): High\r\nCVSS Base Score: 7.5\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\r\n ClamAV Memory Corruption Vulnerabilities\r\nThe following vulnerabilities, which have a SIR on ClamAV, affect Linux, Mac, and Windows-based platforms that are using ClamAV.\r\n\r\nIf an attacker exploits any of this class of vulnerability against affected devices that use Cisco Secure Endpoint Connector for Windows, the scanning engine process could be terminated and cause a DoS condition because the endpoint may become unresponsive and require manual intervention, such as a system reboot, to recover.\r\n\r\nOn Windows-based platforms, attackers have used similar vulnerabilities to achieve remote code execution. However, no evidence exists proving the potential for remote code execution for the vulnerabilities that are described in this advisory. In most circumstances, platform and memory protections prevent practical exploitation of these vulnerabilities for code execution, especially on systems with modern 64-bit architecture. Systems that are running legacy 32-bit Windows platforms are at higher risk for successful exploitation.\r\n\r\nOn Cisco Secure Endpoint Connector for Linux and Mac, the SIR is Medium. Exploitation of these vulnerabilities could cause the scanning engine process to terminate, delaying or preventing further scanning operations. However, overall system stability is not affected.\r\n\r\nFor information about vulnerability scoring and SIRs, see the Security Risk Assessment [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#SecurityRiskAssessment\"] section of the Cisco Security Vulnerability Policy.\r\n\r\nCisco Secure Endpoint Connector, which is distributed from Cisco Secure Endpoint Private Cloud, is affected by these vulnerabilities. Cisco Secure Endpoint Private Cloud itself is not affected.\r\n\r\nCVE-2026-20213: ClamAV PE File Format Processing Memory Corruption Vulnerability\r\n\r\nA vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nCVE ID: CVE-2026-20213\r\nSecurity Impact Rating (SIR): High\r\nCVSS Base Score: 7.5\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\r\n\r\nCVE-2026-20214: ClamAV FSG File Format Processing Memory Corruption Vulnerability\r\n\r\nA vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains portable executable content compressed with FSG to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nCVE ID: CVE-2026-20214\r\nSecurity Impact Rating (SIR): High\r\nCVSS Base Score: 7.5\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\r\n\r\nCVE-2026-20215: ClamAV 7z File Format Processing Memory Corruption Vulnerability\r\n\r\nA vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in 7z files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains 7z content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nCVE ID: CVE-2026-20215\r\nSecurity Impact Rating (SIR): High\r\nCVSS Base Score: 7.5\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\r\n\r\nCVE-2026-20217: ClamAV PESpin File Format Processing Memory Corruption Vulnerability\r\n\r\nA vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nCVE ID: CVE-2026-20217\r\nSecurity Impact Rating (SIR): High\r\nCVSS Base Score: 7.5\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\r\n\r\nCVE-2026-20243: ClamAV ALZ File Format Processing Memory Corruption Vulnerability\r\n\r\nA vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in ALZ files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains ALZ content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nCVE ID: CVE-2026-20243\r\nSecurity Impact Rating (SIR): High\r\nCVSS Base Score: 7.5\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\r\n\r\nCVE-2026-20244: ClamAV DMG File Format Processing Memory Corruption Vulnerability\r\n\r\nA vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in DMG files during scanning, which may result in an integer overflow on 32-bit platforms only. An attacker could exploit this vulnerability by submitting a crafted file that contains DMG content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nCVE ID: CVE-2026-20244\r\nSecurity Impact Rating (SIR): High\r\nCVSS Base Score: 7.5\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"title": "Details"
},
{
"category": "general",
"text": "There are no workarounds that address these vulnerabilities.",
"title": "Workarounds"
},
{
"category": "general",
"text": "Cisco considers any workarounds and mitigations (if applicable) to be temporary solutions until an upgrade to a fixed software release is available. To fully remediate these vulnerabilities and avoid future exposure as described in this advisory, Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.\r\n Fixed Releases\r\nCustomers are advised to upgrade to an appropriate fixed software release [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"] as indicated in the following table:\r\n Cisco Product Cisco Bug ID Fixed Release Availability Secure Endpoint Connector for Linux CSCwt81503 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81503\"] 1.29.01 Secure Endpoint Connector for Mac CSCwt81504 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81504\"] 1.27.21 Secure Endpoint Connector for Windows CSCwt81501 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81501\"] 8.6.21 Secure Endpoint Private Cloud CSCwu55927 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwu55927\"] 4.2.8 and later2\r\n1. Updated releases of Cisco Secure Endpoint Connector are available through the Cisco Secure Endpoint portal. Depending on the configured policy, Cisco Secure Endpoint Connector will automatically update.\r\n2. Affected releases of Cisco Secure Endpoint Connector clients for Cisco Secure Endpoint Private Cloud have been updated in the connector repository. Customers will get these connector updates through normal content update processes.\r\nThe Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.",
"title": "Fixed Software"
},
{
"category": "general",
"text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
"title": "Vulnerability Policy"
},
{
"category": "general",
"text": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.",
"title": "Exploitation and Public Announcements"
},
{
"category": "general",
"text": "Cisco would like to thank the following people for reporting these vulnerabilities:\r\n\r\nDavid Pokora of Trail of Bits, working with Anthropic: CVE-2026-20213, CVE-2026-20214, and CVE-2026-20215\r\nCalif.io in collaboration with Claude and Anthropic Research: CVE-2026-20213\r\nAtuin - Automated Vulnerability Discovery Engine, Tianchu Chen of Tencent Xuanwu Lab: CVE-2026-20213, CVE-2026-20214, and CVE-2026-20217\r\nNiv Moshe working with TrendAI Zero Day Initiative: CVE-2026-20215\r\n\r\nMizu: CVE-2026-20216\r\n\r\nYazdan Soltani: CVE-2026-20243\r\npawlok and barteq of the GetResponse Security Team: CVE-2026-20243\r\nleduckhuong: CVE-2026-20243\r\n\r\nStanley John Tobias: CVE-2026-20244",
"title": "Source"
},
{
"category": "legal_disclaimer",
"text": "SOFTWARE DOWNLOADS AND TECHNICAL SUPPORT\r\n\r\nThe Cisco Support and Downloads [\"https://www.cisco.com/c/en/us/support/index.html\"] page on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool. Please note that customers may download only software that was procured from Cisco directly or through a Cisco authorized reseller or partner and for which the license is still valid.\r\n\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco Technical Assistance Center (TAC) [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]. Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n\r\nWhen considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories [\"https://www.cisco.com/go/psirt\"] for the relevant Cisco products to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"] or their contracted maintenance providers.\r\nLEGAL DISCLAIMER DETAILS\r\n\r\nCISCO DOES NOT MAKE ANY EXPRESS OR IMPLIED GUARANTEES OR WARRANTIES OF ANY KIND, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, CISCO DOES NOT GUARANTEE THE ACCURACY OR COMPLETENESS OF THIS INFORMATION. THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nCopies or summaries of the information contained in this Security Advisory may lack important information or contain factual errors. Customers are advised to visit the Cisco Security Advisories [\"https://www.cisco.com/go/psirt\"] page for the most recent version of this Security Advisory. The Cisco Product Security Incident Response Team (PSIRT) assesses only the affected and fixed release information that is documented in this advisory. See the Cisco Security Vulnerability Policy [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"] for more information.",
"title": "Legal Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "psirt@cisco.com",
"issuing_authority": "Cisco PSIRT",
"name": "Cisco",
"namespace": "https://wwww.cisco.com"
},
"references": [
{
"category": "self",
"summary": "ClamAV Vulnerabilities Affecting Cisco Products: July 2026",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
},
{
"category": "external",
"summary": "Cisco Security Vulnerability Policy",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
},
{
"category": "external",
"summary": "the ClamAV blog",
"url": "https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html"
},
{
"category": "external",
"summary": "CSCwt81503",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81503"
},
{
"category": "external",
"summary": "CSCwt81504",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81504"
},
{
"category": "external",
"summary": "CSCwt81501",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwt81501"
},
{
"category": "external",
"summary": "CSCwu55927",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwu55927"
},
{
"category": "external",
"summary": "Details",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR#details"
},
{
"category": "external",
"summary": "Security Risk Assessment",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#SecurityRiskAssessment"
},
{
"category": "external",
"summary": "fixed software release",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"
},
{
"category": "external",
"summary": "Security Vulnerability Policy",
"url": "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"
},
{
"category": "external",
"summary": "Cisco Support and Downloads",
"url": "https://www.cisco.com/c/en/us/support/index.html"
},
{
"category": "external",
"summary": "Cisco Technical Assistance Center (TAC)",
"url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"
},
{
"category": "external",
"summary": "the advisories",
"url": "https://www.cisco.com/go/psirt"
}
],
"title": "ClamAV Vulnerabilities Affecting Cisco Products: July 2026",
"tracking": {
"current_release_date": "2026-07-02T20:52:13+00:00",
"generator": {
"date": "2026-07-02T20:52:19+00:00",
"engine": {
"name": "TVCE"
}
},
"id": "cisco-sa-clamav-88cFYyxR",
"initial_release_date": "2026-07-01T16:00:00+00:00",
"revision_history": [
{
"date": "2026-07-01T15:55:18+00:00",
"number": "1.0.0",
"summary": "Initial public release."
},
{
"date": "2026-07-02T20:52:13+00:00",
"number": "1.1.0",
"summary": "Added researcher credits."
}
],
"status": "final",
"version": "1.1.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_family",
"name": "Cisco Secure Web Appliance",
"product": {
"name": "Cisco Secure Web Appliance ",
"product_id": "CSAFPID-189789"
}
},
{
"category": "product_family",
"name": "Cisco Secure Email",
"product": {
"name": "Cisco Secure Email ",
"product_id": "CSAFPID-189790"
}
},
{
"category": "product_family",
"name": "Cisco Secure Endpoint",
"product": {
"name": "Cisco Secure Endpoint ",
"product_id": "CSAFPID-221075"
}
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-20213",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwt62774"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-221075",
"CSAFPID-189789",
"CSAFPID-189790"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
}
],
"title": "ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
},
{
"cve": "CVE-2026-20214",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwt62779"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-221075",
"CSAFPID-189789",
"CSAFPID-189790"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
}
],
"title": "ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
},
{
"cve": "CVE-2026-20215",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwt62781"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-221075",
"CSAFPID-189789",
"CSAFPID-189790"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
}
],
"title": "ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
},
{
"cve": "CVE-2026-20216",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwt44538"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-221075",
"CSAFPID-189789",
"CSAFPID-189790"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
}
],
"title": "ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability"
},
{
"cve": "CVE-2026-20217",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwt57454"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-221075",
"CSAFPID-189789",
"CSAFPID-189790"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
}
],
"title": "ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
},
{
"cve": "CVE-2026-20243",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwu18798"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-221075",
"CSAFPID-189789",
"CSAFPID-189790"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
}
],
"title": "ClamAV ALZ Archive Processing Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-20244",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwu22472"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-221075",
"CSAFPID-189789",
"CSAFPID-189790"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-221075",
"CSAFPID-189790",
"CSAFPID-189789"
]
}
],
"title": "ClamAV DMG File Processing Denial of Service Vulnerability"
}
]
}
FKIE_CVE-2026-20213
Vulnerability from fkie_nvd - Published: 2026-07-01 17:16 - Updated: 2026-07-09 17:56
Severity
Summary
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| cisco | secure_endpoint | * | |
| cisco | secure_endpoint | * | |
| cisco | secure_endpoint | * | |
| clamav | clamav | * | |
| clamav | clamav | * |
{
"affected": [
{
"affectedData": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Endpoint",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "6.2.19"
},
{
"status": "affected",
"version": "7.3.3"
},
{
"status": "affected",
"version": "7.2.13"
},
{
"status": "affected",
"version": "6.1.5"
},
{
"status": "affected",
"version": "6.3.1"
},
{
"status": "affected",
"version": "6.2.5"
},
{
"status": "affected",
"version": "7.3.5"
},
{
"status": "affected",
"version": "6.2.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.1.1"
},
{
"status": "affected",
"version": "6.3.5"
},
{
"status": "affected",
"version": "6.2.9"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "6.1.7"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.1.5"
},
{
"status": "affected",
"version": "6.3.3"
},
{
"status": "affected",
"version": "7.3.9"
},
{
"status": "affected",
"version": "6.2.3"
},
{
"status": "affected",
"version": "6.1.9"
},
{
"status": "affected",
"version": "6.0.9"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "6.0.7"
},
{
"status": "affected",
"version": "6.3.7"
},
{
"status": "affected",
"version": "1.12.3"
},
{
"status": "affected",
"version": "1.8.0"
},
{
"status": "affected",
"version": "1.11.1"
},
{
"status": "affected",
"version": "1.12.4"
},
{
"status": "affected",
"version": "1.10.0"
},
{
"status": "affected",
"version": "1.12.0"
},
{
"status": "affected",
"version": "1.8.1"
},
{
"status": "affected",
"version": "1.10.1"
},
{
"status": "affected",
"version": "1.12.1"
},
{
"status": "affected",
"version": "1.12.6"
},
{
"status": "affected",
"version": "1.14.0"
},
{
"status": "affected",
"version": "1.10.2"
},
{
"status": "affected",
"version": "1.12.7"
},
{
"status": "affected",
"version": "1.12.2"
},
{
"status": "affected",
"version": "1.6.0"
},
{
"status": "affected",
"version": "1.9.0"
},
{
"status": "affected",
"version": "1.11.0"
},
{
"status": "affected",
"version": "1.7.0"
},
{
"status": "affected",
"version": "1.13.0"
},
{
"status": "affected",
"version": "1.8.4"
},
{
"status": "affected",
"version": "1.13.1"
},
{
"status": "affected",
"version": "1.9.1"
},
{
"status": "affected",
"version": "1.12.5"
},
{
"status": "affected",
"version": "1.13.2"
},
{
"status": "affected",
"version": "8.1.7.21512"
},
{
"status": "affected",
"version": "8.1.7"
},
{
"status": "affected",
"version": "8.1.5"
},
{
"status": "affected",
"version": "8.1.3.21242"
},
{
"status": "affected",
"version": "8.1.3"
},
{
"status": "affected",
"version": "8.1.5.21322"
},
{
"status": "affected",
"version": "8.1.7.21417"
},
{
"status": "affected",
"version": "1.14.1"
},
{
"status": "affected",
"version": "1.15.1"
},
{
"status": "affected",
"version": "1.15.2"
},
{
"status": "affected",
"version": "1.15.3"
},
{
"status": "affected",
"version": "1.15.4"
},
{
"status": "affected",
"version": "1.15.5"
},
{
"status": "affected",
"version": "1.15.6"
},
{
"status": "affected",
"version": "1.16.0"
},
{
"status": "affected",
"version": "1.16.1"
},
{
"status": "affected",
"version": "1.16.2"
},
{
"status": "affected",
"version": "1.16.3"
},
{
"status": "affected",
"version": "1.18.0"
},
{
"status": "affected",
"version": "1.18.1"
},
{
"status": "affected",
"version": "1.20.0"
},
{
"status": "affected",
"version": "1.21.0"
},
{
"status": "affected",
"version": "1.21.1"
},
{
"status": "affected",
"version": "1.21.2"
},
{
"status": "affected",
"version": "1.21.3"
},
{
"status": "affected",
"version": "1.22.0"
},
{
"status": "affected",
"version": "1.22.1"
},
{
"status": "affected",
"version": "1.22.2"
},
{
"status": "affected",
"version": "1.22.3"
},
{
"status": "affected",
"version": "1.22.4"
},
{
"status": "affected",
"version": "1.24.0"
},
{
"status": "affected",
"version": "1.24.1"
},
{
"status": "affected",
"version": "1.24.2"
},
{
"status": "affected",
"version": "1.24.3"
},
{
"status": "affected",
"version": "1.24.4"
},
{
"status": "affected",
"version": "1.26.0"
},
{
"status": "affected",
"version": "1.24.5"
},
{
"status": "affected",
"version": "1.26.1"
},
{
"status": "affected",
"version": "1.27.0"
},
{
"status": "affected",
"version": "1.15.0"
},
{
"status": "affected",
"version": "1.17.0"
},
{
"status": "affected",
"version": "1.17.1"
},
{
"status": "affected",
"version": "1.17.2"
},
{
"status": "affected",
"version": "1.19.0"
},
{
"status": "affected",
"version": "1.20.1"
},
{
"status": "affected",
"version": "1.20.2"
},
{
"status": "affected",
"version": "1.20.3"
},
{
"status": "affected",
"version": "1.20.4"
},
{
"status": "affected",
"version": "1.20.5"
},
{
"status": "affected",
"version": "1.20.6"
},
{
"status": "affected",
"version": "1.23.0"
},
{
"status": "affected",
"version": "1.23.1"
},
{
"status": "affected",
"version": "1.20.7"
},
{
"status": "affected",
"version": "1.20.8"
},
{
"status": "affected",
"version": "1.25.0"
},
{
"status": "affected",
"version": "1.25.1"
},
{
"status": "affected",
"version": "1.25.2"
},
{
"status": "affected",
"version": "1.27.1"
},
{
"status": "affected",
"version": "1.27.2"
},
{
"status": "affected",
"version": "7.3.13"
},
{
"status": "affected",
"version": "7.3.15"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.4.1.20425"
},
{
"status": "affected",
"version": "7.4.1.20439"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.4.3.20679"
},
{
"status": "affected",
"version": "7.4.5"
},
{
"status": "affected",
"version": "7.5.1.20813"
},
{
"status": "affected",
"version": "7.5.1.20833"
},
{
"status": "affected",
"version": "7.5.3"
},
{
"status": "affected",
"version": "7.5.5"
},
{
"status": "affected",
"version": "8.0.1.21160"
},
{
"status": "affected",
"version": "8.0.1.21164"
},
{
"status": "affected",
"version": "7.5.7"
},
{
"status": "affected",
"version": "7.5.9"
},
{
"status": "affected",
"version": "7.5.11"
},
{
"status": "affected",
"version": "8.1.7.21585"
},
{
"status": "affected",
"version": "7.5.13.21586"
},
{
"status": "affected",
"version": "7.5.13.21598"
},
{
"status": "affected",
"version": "8.2.1.21612"
},
{
"status": "affected",
"version": "8.2.1.21650"
},
{
"status": "affected",
"version": "7.5.15.21611"
},
{
"status": "affected",
"version": "7.5.17.21680"
},
{
"status": "affected",
"version": "8.2.3.30119"
},
{
"status": "affected",
"version": "8.2.4.30130"
},
{
"status": "affected",
"version": "8.4.0"
},
{
"status": "affected",
"version": "7.5.19"
},
{
"status": "affected",
"version": "8.4.1.30298"
},
{
"status": "affected",
"version": "8.4.2.30317"
},
{
"status": "affected",
"version": "8.4.1.30307"
},
{
"status": "affected",
"version": "7.5.20"
},
{
"status": "affected",
"version": "8.4.3"
},
{
"status": "affected",
"version": "8.4.4.30419"
},
{
"status": "affected",
"version": "8.4.4.30467"
},
{
"status": "affected",
"version": "7.5.21.21732"
},
{
"status": "affected",
"version": "8.4.5.30483"
}
]
}
],
"source": "psirt@cisco.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:macos:*:*",
"matchCriteriaId": "E534D1FF-B590-40F3-9874-AC2BDA807087",
"versionEndExcluding": "1.27.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:linux:*:*",
"matchCriteriaId": "CB2B4CBA-534A-4111-8920-8580B12C4F46",
"versionEndExcluding": "1.29.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*",
"matchCriteriaId": "4EB7F99A-01AB-44EE-B682-5E2C9E7D2A4B",
"versionEndExcluding": "8.6.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CD23E971-4735-4C28-BFE1-AB807630F2EE",
"versionEndExcluding": "1.4.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5CC3C470-BBC6-449E-80F1-F9E762442D3C",
"versionEndExcluding": "1.5.3",
"versionStartIncluding": "1.5.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
}
],
"id": "CVE-2026-20213",
"lastModified": "2026-07-09T17:56:55.537",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "psirt@cisco.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-20213",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-01T17:18:10.967118Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-07-01T17:16:29.460",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-120"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
}
GHSA-RJVX-X4G3-VR6W
Vulnerability from github – Published: 2026-07-01 18:31 – Updated: 2026-07-01 18:31
VLAI
Details
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Severity
7.5 (High)
{
"affected": [],
"aliases": [
"CVE-2026-20213"
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-07-01T17:16:29Z",
"severity": "HIGH"
},
"details": "A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\n\nThis vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"id": "GHSA-rjvx-x4g3-vr6w",
"modified": "2026-07-01T18:31:51Z",
"published": "2026-07-01T18:31:51Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20213"
},
{
"type": "WEB",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
MSRC_CVE-2026-20213
Vulnerability from csaf_microsoft - Published: 2026-07-02 00:00 - Updated: 2026-07-12 14:55Summary
ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability
Notes
Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 21568-17084 | — |
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 17084-1 | — |
Vendor Fix
fix
|
References
4 references
| URL | Category |
|---|---|
| https://msrc.microsoft.com/csaf/vex/2026/msrc_cve… | self |
| https://support.microsoft.com/lifecycle | external |
| https://www.first.org/cvss | external |
| https://msrc.microsoft.com/csaf/vex/2026/msrc_cve… | self |
{
"document": {
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20213 ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-20213.json"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability",
"tracking": {
"current_release_date": "2026-07-12T14:55:43.000Z",
"generator": {
"date": "2026-07-13T08:50:22.001Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2026-20213",
"initial_release_date": "2026-07-02T00:00:00.000Z",
"revision_history": [
{
"date": "2026-07-11T01:01:22.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
},
{
"date": "2026-07-12T14:55:43.000Z",
"legacy_version": "2",
"number": "2",
"summary": "Information published."
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "3.0",
"product": {
"name": "Azure Linux 3.0",
"product_id": "17084"
}
}
],
"category": "product_name",
"name": "Azure Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cazl3 clamav 0:1.5.2-3.azl3",
"product": {
"name": "\u003cazl3 clamav 0:1.5.2-3.azl3",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "azl3 clamav 0:1.5.2-3.azl3",
"product": {
"name": "azl3 clamav 0:1.5.2-3.azl3",
"product_id": "21568"
}
}
],
"category": "product_name",
"name": "clamav"
}
],
"category": "vendor",
"name": "Microsoft"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "\u003cazl3 clamav 0:1.5.2-3.azl3 as a component of Azure Linux 3.0",
"product_id": "17084-1"
},
"product_reference": "1",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "azl3 clamav 0:1.5.2-3.azl3 as a component of Azure Linux 3.0",
"product_id": "21568-17084"
},
"product_reference": "21568",
"relates_to_product_reference": "17084"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-20213",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "general",
"text": "cisco",
"title": "Assigning CNA"
}
],
"product_status": {
"fixed": [
"21568-17084"
],
"known_affected": [
"17084-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20213 ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-20213.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-11T01:01:22.000Z",
"details": "0:1.5.3-1.azl3:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
"product_ids": [
"17084-1"
],
"url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalsScore": 0.0,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.5,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"17084-1"
]
}
],
"title": "ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
}
]
}
OPENSUSE-SU-2026:11182-1
Vulnerability from csaf_opensuse - Published: 2026-07-04 00:00 - Updated: 2026-07-04 00:00Summary
clamav-1.5.3-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: clamav-1.5.3-1.1 on GA media
Description of the patch: These are all security issues fixed in the clamav-1.5.3-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11182
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
26 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://www.suse.com/security/cve/CVE-2026-20213/ | self |
| https://www.suse.com/security/cve/CVE-2026-20214/ | self |
| https://www.suse.com/security/cve/CVE-2026-20215/ | self |
| https://www.suse.com/security/cve/CVE-2026-20216/ | self |
| https://www.suse.com/security/cve/CVE-2026-20217/ | self |
| https://www.suse.com/security/cve/CVE-2026-20243/ | self |
| https://www.suse.com/security/cve/CVE-2026-20244/ | self |
| https://www.suse.com/security/cve/CVE-2026-41676/ | self |
| https://www.suse.com/security/cve/CVE-2026-20213 | external |
| https://bugzilla.suse.com/1270107 | external |
| https://www.suse.com/security/cve/CVE-2026-20214 | external |
| https://bugzilla.suse.com/1270085 | external |
| https://www.suse.com/security/cve/CVE-2026-20215 | external |
| https://bugzilla.suse.com/1270088 | external |
| https://www.suse.com/security/cve/CVE-2026-20216 | external |
| https://bugzilla.suse.com/1270089 | external |
| https://www.suse.com/security/cve/CVE-2026-20217 | external |
| https://bugzilla.suse.com/1270091 | external |
| https://www.suse.com/security/cve/CVE-2026-20243 | external |
| https://bugzilla.suse.com/1270092 | external |
| https://www.suse.com/security/cve/CVE-2026-20244 | external |
| https://bugzilla.suse.com/1270106 | external |
| https://www.suse.com/security/cve/CVE-2026-41676 | external |
| https://bugzilla.suse.com/1270137 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "clamav-1.5.3-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the clamav-1.5.3-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11182",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11182-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20213 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20214 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20215 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20216 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20217 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20243 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20243/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20244 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20244/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41676 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41676/"
}
],
"title": "clamav-1.5.3-1.1 on GA media",
"tracking": {
"current_release_date": "2026-07-04T00:00:00Z",
"generator": {
"date": "2026-07-04T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11182-1",
"initial_release_date": "2026-07-04T00:00:00Z",
"revision_history": [
{
"date": "2026-07-04T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.3-1.1.aarch64",
"product": {
"name": "clamav-1.5.3-1.1.aarch64",
"product_id": "clamav-1.5.3-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.3-1.1.aarch64",
"product": {
"name": "clamav-devel-1.5.3-1.1.aarch64",
"product_id": "clamav-devel-1.5.3-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-docs-html-1.5.3-1.1.aarch64",
"product": {
"name": "clamav-docs-html-1.5.3-1.1.aarch64",
"product_id": "clamav-docs-html-1.5.3-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.3-1.1.aarch64",
"product": {
"name": "clamav-milter-1.5.3-1.1.aarch64",
"product_id": "clamav-milter-1.5.3-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.3-1.1.aarch64",
"product": {
"name": "libclamav12-1.5.3-1.1.aarch64",
"product_id": "libclamav12-1.5.3-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.3-1.1.aarch64",
"product": {
"name": "libclammspack0-1.5.3-1.1.aarch64",
"product_id": "libclammspack0-1.5.3-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.3-1.1.aarch64",
"product": {
"name": "libfreshclam4-1.5.3-1.1.aarch64",
"product_id": "libfreshclam4-1.5.3-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.3-1.1.ppc64le",
"product": {
"name": "clamav-1.5.3-1.1.ppc64le",
"product_id": "clamav-1.5.3-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.3-1.1.ppc64le",
"product": {
"name": "clamav-devel-1.5.3-1.1.ppc64le",
"product_id": "clamav-devel-1.5.3-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-docs-html-1.5.3-1.1.ppc64le",
"product": {
"name": "clamav-docs-html-1.5.3-1.1.ppc64le",
"product_id": "clamav-docs-html-1.5.3-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.3-1.1.ppc64le",
"product": {
"name": "clamav-milter-1.5.3-1.1.ppc64le",
"product_id": "clamav-milter-1.5.3-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.3-1.1.ppc64le",
"product": {
"name": "libclamav12-1.5.3-1.1.ppc64le",
"product_id": "libclamav12-1.5.3-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.3-1.1.ppc64le",
"product": {
"name": "libclammspack0-1.5.3-1.1.ppc64le",
"product_id": "libclammspack0-1.5.3-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.3-1.1.ppc64le",
"product": {
"name": "libfreshclam4-1.5.3-1.1.ppc64le",
"product_id": "libfreshclam4-1.5.3-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.3-1.1.s390x",
"product": {
"name": "clamav-1.5.3-1.1.s390x",
"product_id": "clamav-1.5.3-1.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.3-1.1.s390x",
"product": {
"name": "clamav-devel-1.5.3-1.1.s390x",
"product_id": "clamav-devel-1.5.3-1.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-docs-html-1.5.3-1.1.s390x",
"product": {
"name": "clamav-docs-html-1.5.3-1.1.s390x",
"product_id": "clamav-docs-html-1.5.3-1.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.3-1.1.s390x",
"product": {
"name": "clamav-milter-1.5.3-1.1.s390x",
"product_id": "clamav-milter-1.5.3-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.3-1.1.s390x",
"product": {
"name": "libclamav12-1.5.3-1.1.s390x",
"product_id": "libclamav12-1.5.3-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.3-1.1.s390x",
"product": {
"name": "libclammspack0-1.5.3-1.1.s390x",
"product_id": "libclammspack0-1.5.3-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.3-1.1.s390x",
"product": {
"name": "libfreshclam4-1.5.3-1.1.s390x",
"product_id": "libfreshclam4-1.5.3-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.3-1.1.x86_64",
"product": {
"name": "clamav-1.5.3-1.1.x86_64",
"product_id": "clamav-1.5.3-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.3-1.1.x86_64",
"product": {
"name": "clamav-devel-1.5.3-1.1.x86_64",
"product_id": "clamav-devel-1.5.3-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-docs-html-1.5.3-1.1.x86_64",
"product": {
"name": "clamav-docs-html-1.5.3-1.1.x86_64",
"product_id": "clamav-docs-html-1.5.3-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.3-1.1.x86_64",
"product": {
"name": "clamav-milter-1.5.3-1.1.x86_64",
"product_id": "clamav-milter-1.5.3-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.3-1.1.x86_64",
"product": {
"name": "libclamav12-1.5.3-1.1.x86_64",
"product_id": "libclamav12-1.5.3-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.3-1.1.x86_64",
"product": {
"name": "libclammspack0-1.5.3-1.1.x86_64",
"product_id": "libclammspack0-1.5.3-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.3-1.1.x86_64",
"product": {
"name": "libfreshclam4-1.5.3-1.1.x86_64",
"product_id": "libfreshclam4-1.5.3-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64"
},
"product_reference": "clamav-1.5.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le"
},
"product_reference": "clamav-1.5.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x"
},
"product_reference": "clamav-1.5.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64"
},
"product_reference": "clamav-1.5.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64"
},
"product_reference": "clamav-devel-1.5.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le"
},
"product_reference": "clamav-devel-1.5.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x"
},
"product_reference": "clamav-devel-1.5.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64"
},
"product_reference": "clamav-devel-1.5.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64"
},
"product_reference": "clamav-docs-html-1.5.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le"
},
"product_reference": "clamav-docs-html-1.5.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x"
},
"product_reference": "clamav-docs-html-1.5.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64"
},
"product_reference": "clamav-docs-html-1.5.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64"
},
"product_reference": "clamav-milter-1.5.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le"
},
"product_reference": "clamav-milter-1.5.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x"
},
"product_reference": "clamav-milter-1.5.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64"
},
"product_reference": "clamav-milter-1.5.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64"
},
"product_reference": "libclamav12-1.5.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le"
},
"product_reference": "libclamav12-1.5.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x"
},
"product_reference": "libclamav12-1.5.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64"
},
"product_reference": "libclamav12-1.5.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64"
},
"product_reference": "libclammspack0-1.5.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le"
},
"product_reference": "libclammspack0-1.5.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x"
},
"product_reference": "libclammspack0-1.5.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64"
},
"product_reference": "libclammspack0-1.5.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64"
},
"product_reference": "libfreshclam4-1.5.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le"
},
"product_reference": "libfreshclam4-1.5.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x"
},
"product_reference": "libfreshclam4-1.5.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-20213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20213"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20213",
"url": "https://www.suse.com/security/cve/CVE-2026-20213"
},
{
"category": "external",
"summary": "SUSE Bug 1270107 for CVE-2026-20213",
"url": "https://bugzilla.suse.com/1270107"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-04T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-20213"
},
{
"cve": "CVE-2026-20214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20214"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains portable executable content compressed with FSG to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20214",
"url": "https://www.suse.com/security/cve/CVE-2026-20214"
},
{
"category": "external",
"summary": "SUSE Bug 1270085 for CVE-2026-20214",
"url": "https://bugzilla.suse.com/1270085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-04T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-20214"
},
{
"cve": "CVE-2026-20215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20215"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in 7z files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains 7z\u0026nbsp;content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20215",
"url": "https://www.suse.com/security/cve/CVE-2026-20215"
},
{
"category": "external",
"summary": "SUSE Bug 1270088 for CVE-2026-20215",
"url": "https://bugzilla.suse.com/1270088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-04T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-20215"
},
{
"cve": "CVE-2026-20216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20216"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20216",
"url": "https://www.suse.com/security/cve/CVE-2026-20216"
},
{
"category": "external",
"summary": "SUSE Bug 1270089 for CVE-2026-20216",
"url": "https://bugzilla.suse.com/1270089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-04T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-20216"
},
{
"cve": "CVE-2026-20217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20217"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20217",
"url": "https://www.suse.com/security/cve/CVE-2026-20217"
},
{
"category": "external",
"summary": "SUSE Bug 1270091 for CVE-2026-20217",
"url": "https://bugzilla.suse.com/1270091"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-04T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-20217"
},
{
"cve": "CVE-2026-20243",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20243"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in ALZ files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains ALZ content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20243",
"url": "https://www.suse.com/security/cve/CVE-2026-20243"
},
{
"category": "external",
"summary": "SUSE Bug 1270092 for CVE-2026-20243",
"url": "https://bugzilla.suse.com/1270092"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-04T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-20243"
},
{
"cve": "CVE-2026-20244",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20244"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in DMG files during scanning, which may result in an integer overflow on 32-bit platforms only. An attacker could exploit this vulnerability by submitting a crafted file that contains DMG content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20244",
"url": "https://www.suse.com/security/cve/CVE-2026-20244"
},
{
"category": "external",
"summary": "SUSE Bug 1270106 for CVE-2026-20244",
"url": "https://bugzilla.suse.com/1270106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-04T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-20244"
},
{
"cve": "CVE-2026-41676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41676"
}
],
"notes": [
{
"category": "general",
"text": "rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::derive (and PkeyCtxRef::derive) sets len = buf.len() and passes it as the in/out length to EVP_PKEY_derive, relying on OpenSSL to honor it. On OpenSSL 1.1.x, X25519, X448, DH and HKDF-extract ignore the incoming *keylen, unconditionally writing the full shared secret (32/56/prime-size bytes). A caller passing a short slice gets a heap/stack overflow from safe code. OpenSSL 3.x providers do check, so this only impacts older OpenSSL. This vulnerability is fixed in 0.10.78.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41676",
"url": "https://www.suse.com/security/cve/CVE-2026-41676"
},
{
"category": "external",
"summary": "SUSE Bug 1270137 for CVE-2026-41676",
"url": "https://bugzilla.suse.com/1270137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:clamav-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.3-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-04T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-41676"
}
]
}
OPENSUSE-SU-2026:21252-1
Vulnerability from csaf_opensuse - Published: 2026-07-07 16:59 - Updated: 2026-07-07 16:59Summary
Security update for clamav
Severity
Important
Notes
Title of the patch: Security update for clamav
Description of the patch: This update for clamav fixes the following issues:
Update to version 1.5.3.
Security issues fixed:
- CVE-2026-20213: out-of-bounds write due to improper boundary checks for content in PE files during scanning
(bsc#1270107).
- CVE-2026-20214: out-of-bounds write due to improper boundary checks for content in FSG files during scanning
(bsc#1270085).
- CVE-2026-20215: out-of-bounds write due to improper boundary checks for content in 7z files during scanning
(bsc#1270088).
- CVE-2026-20216: denial of service due to improper handling of temporary resources during InstallShield file scanning
(bsc#1270089).
- CVE-2026-20217: out-of-bounds write due to improper boundary checks for content in PESpin files during scanning
(bsc#1270091).
- CVE-2026-20243: out-of-bounds write due to improper boundary checks for content in ALZ files during scanning
(bsc#1270092).
- CVE-2026-20244: integer overflow and DoS due to improper boundary checks for content in DMG files during scanning
(bsc#1270106).
- CVE-2026-41676: buffer overflow due to missing checks via `Deriver:derive`, `PkeyCtxRef:derive` and OpenSSL 1.1.1
(bsc#1270138).
Other updates and bugfixes:
- Version 1.5.3:
* Fixed a bug in the PESpin unpacker cleanup path that could free pointers into the scanned file buffer and crash the
scanner.
* Fixed an integer overflow in PE rebuild size calculations that could be reached through a malformed Aspack-packed PE
file and lead to a heap buffer overflow write.
* Fixed an InstallShield archive extraction limit bypass that could write far more temporary data than intended and
exhaust temporary storage.
* Fixed an FSG unpacker loop underflow that could write past the section array while scanning a malformed PE file.
* Fixed ALZ parser size handling bugs that could cause malformed ALZ archives to panic, abort the scanner, or skip
expected scan-limit handling.
* Fixed a 7z parser substream count overflow that could under-allocate parser metadata arrays and write past them
while reading a malformed archive.
* Fixed 32-bit DMG parser size checks that could let a short mish stripe table pass validation and crash 32-bit
scanner builds.
* Hardened clamscan, clamdscan, and clamonacc quarantine actions against time-of-check/time-of-use races that could
redirect copied, moved, or removed files under unsafe quarantine directory configurations.
* Upgraded the Rust tar dependency to resolve the RUSTSEC-2026-0067 and RUSTSEC-2026-0068 advisories, and upgraded the
Rust openssl dependency to resolve CVE-2026-41676.
* Raised the minimum required CMake version to 3.17 to fix Linux builds with libcurl v8.21.0 when linking static
library dependencies.
* Metadata preclass scans now run before the final scan verdict.
* ClamOnAcc: Fixed errors when recursively excluded paths are children of an included path.
* ClamOnAcc: Fixed hash bucket list corruption when two watched paths collide in the same bucket.
Patchnames: openSUSE-Leap-16.0-1173
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
34 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://bugzilla.suse.com/1270085 | self |
| https://bugzilla.suse.com/1270088 | self |
| https://bugzilla.suse.com/1270089 | self |
| https://bugzilla.suse.com/1270091 | self |
| https://bugzilla.suse.com/1270092 | self |
| https://bugzilla.suse.com/1270106 | self |
| https://bugzilla.suse.com/1270107 | self |
| https://bugzilla.suse.com/1270138 | self |
| https://www.suse.com/security/cve/CVE-2026-20213/ | self |
| https://www.suse.com/security/cve/CVE-2026-20214/ | self |
| https://www.suse.com/security/cve/CVE-2026-20215/ | self |
| https://www.suse.com/security/cve/CVE-2026-20216/ | self |
| https://www.suse.com/security/cve/CVE-2026-20217/ | self |
| https://www.suse.com/security/cve/CVE-2026-20243/ | self |
| https://www.suse.com/security/cve/CVE-2026-20244/ | self |
| https://www.suse.com/security/cve/CVE-2026-41676/ | self |
| https://www.suse.com/security/cve/CVE-2026-20213 | external |
| https://bugzilla.suse.com/1270107 | external |
| https://www.suse.com/security/cve/CVE-2026-20214 | external |
| https://bugzilla.suse.com/1270085 | external |
| https://www.suse.com/security/cve/CVE-2026-20215 | external |
| https://bugzilla.suse.com/1270088 | external |
| https://www.suse.com/security/cve/CVE-2026-20216 | external |
| https://bugzilla.suse.com/1270089 | external |
| https://www.suse.com/security/cve/CVE-2026-20217 | external |
| https://bugzilla.suse.com/1270091 | external |
| https://www.suse.com/security/cve/CVE-2026-20243 | external |
| https://bugzilla.suse.com/1270092 | external |
| https://www.suse.com/security/cve/CVE-2026-20244 | external |
| https://bugzilla.suse.com/1270106 | external |
| https://www.suse.com/security/cve/CVE-2026-41676 | external |
| https://bugzilla.suse.com/1270137 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for clamav",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for clamav fixes the following issues:\n\nUpdate to version 1.5.3.\n\nSecurity issues fixed:\n\n- CVE-2026-20213: out-of-bounds write due to improper boundary checks for content in PE files during scanning\n (bsc#1270107).\n- CVE-2026-20214: out-of-bounds write due to improper boundary checks for content in FSG files during scanning\n (bsc#1270085).\n- CVE-2026-20215: out-of-bounds write due to improper boundary checks for content in 7z files during scanning\n (bsc#1270088).\n- CVE-2026-20216: denial of service due to improper handling of temporary resources during InstallShield file scanning\n (bsc#1270089).\n- CVE-2026-20217: out-of-bounds write due to improper boundary checks for content in PESpin files during scanning\n (bsc#1270091).\n- CVE-2026-20243: out-of-bounds write due to improper boundary checks for content in ALZ files during scanning\n (bsc#1270092).\n- CVE-2026-20244: integer overflow and DoS due to improper boundary checks for content in DMG files during scanning\n (bsc#1270106).\n- CVE-2026-41676: buffer overflow due to missing checks via `Deriver:derive`, `PkeyCtxRef:derive` and OpenSSL 1.1.1\n (bsc#1270138).\n\nOther updates and bugfixes:\n\n- Version 1.5.3:\n * Fixed a bug in the PESpin unpacker cleanup path that could free pointers into the scanned file buffer and crash the\n scanner.\n * Fixed an integer overflow in PE rebuild size calculations that could be reached through a malformed Aspack-packed PE\n file and lead to a heap buffer overflow write.\n * Fixed an InstallShield archive extraction limit bypass that could write far more temporary data than intended and\n exhaust temporary storage.\n * Fixed an FSG unpacker loop underflow that could write past the section array while scanning a malformed PE file.\n * Fixed ALZ parser size handling bugs that could cause malformed ALZ archives to panic, abort the scanner, or skip\n expected scan-limit handling.\n * Fixed a 7z parser substream count overflow that could under-allocate parser metadata arrays and write past them\n while reading a malformed archive.\n * Fixed 32-bit DMG parser size checks that could let a short mish stripe table pass validation and crash 32-bit\n scanner builds.\n * Hardened clamscan, clamdscan, and clamonacc quarantine actions against time-of-check/time-of-use races that could\n redirect copied, moved, or removed files under unsafe quarantine directory configurations.\n * Upgraded the Rust tar dependency to resolve the RUSTSEC-2026-0067 and RUSTSEC-2026-0068 advisories, and upgraded the\n Rust openssl dependency to resolve CVE-2026-41676.\n * Raised the minimum required CMake version to 3.17 to fix Linux builds with libcurl v8.21.0 when linking static\n library dependencies.\n * Metadata preclass scans now run before the final scan verdict.\n * ClamOnAcc: Fixed errors when recursively excluded paths are children of an included path.\n * ClamOnAcc: Fixed hash bucket list corruption when two watched paths collide in the same bucket.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-1173",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21252-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1270085",
"url": "https://bugzilla.suse.com/1270085"
},
{
"category": "self",
"summary": "SUSE Bug 1270088",
"url": "https://bugzilla.suse.com/1270088"
},
{
"category": "self",
"summary": "SUSE Bug 1270089",
"url": "https://bugzilla.suse.com/1270089"
},
{
"category": "self",
"summary": "SUSE Bug 1270091",
"url": "https://bugzilla.suse.com/1270091"
},
{
"category": "self",
"summary": "SUSE Bug 1270092",
"url": "https://bugzilla.suse.com/1270092"
},
{
"category": "self",
"summary": "SUSE Bug 1270106",
"url": "https://bugzilla.suse.com/1270106"
},
{
"category": "self",
"summary": "SUSE Bug 1270107",
"url": "https://bugzilla.suse.com/1270107"
},
{
"category": "self",
"summary": "SUSE Bug 1270138",
"url": "https://bugzilla.suse.com/1270138"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20213 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20214 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20215 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20216 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20217 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20243 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20243/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20244 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20244/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41676 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41676/"
}
],
"title": "Security update for clamav",
"tracking": {
"current_release_date": "2026-07-07T16:59:27Z",
"generator": {
"date": "2026-07-07T16:59:27Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21252-1",
"initial_release_date": "2026-07-07T16:59:27Z",
"revision_history": [
{
"date": "2026-07-07T16:59:27Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.3-160000.1.1.aarch64",
"product": {
"name": "clamav-1.5.3-160000.1.1.aarch64",
"product_id": "clamav-1.5.3-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.3-160000.1.1.aarch64",
"product": {
"name": "clamav-devel-1.5.3-160000.1.1.aarch64",
"product_id": "clamav-devel-1.5.3-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.3-160000.1.1.aarch64",
"product": {
"name": "clamav-milter-1.5.3-160000.1.1.aarch64",
"product_id": "clamav-milter-1.5.3-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.3-160000.1.1.aarch64",
"product": {
"name": "libclamav12-1.5.3-160000.1.1.aarch64",
"product_id": "libclamav12-1.5.3-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.3-160000.1.1.aarch64",
"product": {
"name": "libclammspack0-1.5.3-160000.1.1.aarch64",
"product_id": "libclammspack0-1.5.3-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.3-160000.1.1.aarch64",
"product": {
"name": "libfreshclam4-1.5.3-160000.1.1.aarch64",
"product_id": "libfreshclam4-1.5.3-160000.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-docs-html-1.5.3-160000.1.1.noarch",
"product": {
"name": "clamav-docs-html-1.5.3-160000.1.1.noarch",
"product_id": "clamav-docs-html-1.5.3-160000.1.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.3-160000.1.1.ppc64le",
"product": {
"name": "clamav-1.5.3-160000.1.1.ppc64le",
"product_id": "clamav-1.5.3-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.3-160000.1.1.ppc64le",
"product": {
"name": "clamav-devel-1.5.3-160000.1.1.ppc64le",
"product_id": "clamav-devel-1.5.3-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.3-160000.1.1.ppc64le",
"product": {
"name": "clamav-milter-1.5.3-160000.1.1.ppc64le",
"product_id": "clamav-milter-1.5.3-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.3-160000.1.1.ppc64le",
"product": {
"name": "libclamav12-1.5.3-160000.1.1.ppc64le",
"product_id": "libclamav12-1.5.3-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.3-160000.1.1.ppc64le",
"product": {
"name": "libclammspack0-1.5.3-160000.1.1.ppc64le",
"product_id": "libclammspack0-1.5.3-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.3-160000.1.1.ppc64le",
"product": {
"name": "libfreshclam4-1.5.3-160000.1.1.ppc64le",
"product_id": "libfreshclam4-1.5.3-160000.1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.3-160000.1.1.s390x",
"product": {
"name": "clamav-1.5.3-160000.1.1.s390x",
"product_id": "clamav-1.5.3-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.3-160000.1.1.s390x",
"product": {
"name": "clamav-devel-1.5.3-160000.1.1.s390x",
"product_id": "clamav-devel-1.5.3-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.3-160000.1.1.s390x",
"product": {
"name": "clamav-milter-1.5.3-160000.1.1.s390x",
"product_id": "clamav-milter-1.5.3-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.3-160000.1.1.s390x",
"product": {
"name": "libclamav12-1.5.3-160000.1.1.s390x",
"product_id": "libclamav12-1.5.3-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.3-160000.1.1.s390x",
"product": {
"name": "libclammspack0-1.5.3-160000.1.1.s390x",
"product_id": "libclammspack0-1.5.3-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.3-160000.1.1.s390x",
"product": {
"name": "libfreshclam4-1.5.3-160000.1.1.s390x",
"product_id": "libfreshclam4-1.5.3-160000.1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.3-160000.1.1.x86_64",
"product": {
"name": "clamav-1.5.3-160000.1.1.x86_64",
"product_id": "clamav-1.5.3-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.3-160000.1.1.x86_64",
"product": {
"name": "clamav-devel-1.5.3-160000.1.1.x86_64",
"product_id": "clamav-devel-1.5.3-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.3-160000.1.1.x86_64",
"product": {
"name": "clamav-milter-1.5.3-160000.1.1.x86_64",
"product_id": "clamav-milter-1.5.3-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.3-160000.1.1.x86_64",
"product": {
"name": "libclamav12-1.5.3-160000.1.1.x86_64",
"product_id": "libclamav12-1.5.3-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.3-160000.1.1.x86_64",
"product": {
"name": "libclammspack0-1.5.3-160000.1.1.x86_64",
"product_id": "libclammspack0-1.5.3-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.3-160000.1.1.x86_64",
"product": {
"name": "libfreshclam4-1.5.3-160000.1.1.x86_64",
"product_id": "libfreshclam4-1.5.3-160000.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64"
},
"product_reference": "clamav-1.5.3-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le"
},
"product_reference": "clamav-1.5.3-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x"
},
"product_reference": "clamav-1.5.3-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64"
},
"product_reference": "clamav-1.5.3-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64"
},
"product_reference": "clamav-devel-1.5.3-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le"
},
"product_reference": "clamav-devel-1.5.3-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x"
},
"product_reference": "clamav-devel-1.5.3-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64"
},
"product_reference": "clamav-devel-1.5.3-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.3-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch"
},
"product_reference": "clamav-docs-html-1.5.3-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64"
},
"product_reference": "clamav-milter-1.5.3-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le"
},
"product_reference": "clamav-milter-1.5.3-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x"
},
"product_reference": "clamav-milter-1.5.3-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64"
},
"product_reference": "clamav-milter-1.5.3-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64"
},
"product_reference": "libclamav12-1.5.3-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le"
},
"product_reference": "libclamav12-1.5.3-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x"
},
"product_reference": "libclamav12-1.5.3-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64"
},
"product_reference": "libclamav12-1.5.3-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64"
},
"product_reference": "libclammspack0-1.5.3-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le"
},
"product_reference": "libclammspack0-1.5.3-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x"
},
"product_reference": "libclammspack0-1.5.3-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64"
},
"product_reference": "libclammspack0-1.5.3-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64"
},
"product_reference": "libfreshclam4-1.5.3-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le"
},
"product_reference": "libfreshclam4-1.5.3-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x"
},
"product_reference": "libfreshclam4-1.5.3-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.3-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-20213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20213"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20213",
"url": "https://www.suse.com/security/cve/CVE-2026-20213"
},
{
"category": "external",
"summary": "SUSE Bug 1270107 for CVE-2026-20213",
"url": "https://bugzilla.suse.com/1270107"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-07T16:59:27Z",
"details": "important"
}
],
"title": "CVE-2026-20213"
},
{
"cve": "CVE-2026-20214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20214"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains portable executable content compressed with FSG to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20214",
"url": "https://www.suse.com/security/cve/CVE-2026-20214"
},
{
"category": "external",
"summary": "SUSE Bug 1270085 for CVE-2026-20214",
"url": "https://bugzilla.suse.com/1270085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-07T16:59:27Z",
"details": "important"
}
],
"title": "CVE-2026-20214"
},
{
"cve": "CVE-2026-20215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20215"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in 7z files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains 7z\u0026nbsp;content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20215",
"url": "https://www.suse.com/security/cve/CVE-2026-20215"
},
{
"category": "external",
"summary": "SUSE Bug 1270088 for CVE-2026-20215",
"url": "https://bugzilla.suse.com/1270088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-07T16:59:27Z",
"details": "important"
}
],
"title": "CVE-2026-20215"
},
{
"cve": "CVE-2026-20216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20216"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20216",
"url": "https://www.suse.com/security/cve/CVE-2026-20216"
},
{
"category": "external",
"summary": "SUSE Bug 1270089 for CVE-2026-20216",
"url": "https://bugzilla.suse.com/1270089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-07T16:59:27Z",
"details": "important"
}
],
"title": "CVE-2026-20216"
},
{
"cve": "CVE-2026-20217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20217"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20217",
"url": "https://www.suse.com/security/cve/CVE-2026-20217"
},
{
"category": "external",
"summary": "SUSE Bug 1270091 for CVE-2026-20217",
"url": "https://bugzilla.suse.com/1270091"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-07T16:59:27Z",
"details": "important"
}
],
"title": "CVE-2026-20217"
},
{
"cve": "CVE-2026-20243",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20243"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in ALZ files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains ALZ content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20243",
"url": "https://www.suse.com/security/cve/CVE-2026-20243"
},
{
"category": "external",
"summary": "SUSE Bug 1270092 for CVE-2026-20243",
"url": "https://bugzilla.suse.com/1270092"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-07T16:59:27Z",
"details": "important"
}
],
"title": "CVE-2026-20243"
},
{
"cve": "CVE-2026-20244",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20244"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in DMG files during scanning, which may result in an integer overflow on 32-bit platforms only. An attacker could exploit this vulnerability by submitting a crafted file that contains DMG content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20244",
"url": "https://www.suse.com/security/cve/CVE-2026-20244"
},
{
"category": "external",
"summary": "SUSE Bug 1270106 for CVE-2026-20244",
"url": "https://bugzilla.suse.com/1270106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-07T16:59:27Z",
"details": "important"
}
],
"title": "CVE-2026-20244"
},
{
"cve": "CVE-2026-41676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41676"
}
],
"notes": [
{
"category": "general",
"text": "rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::derive (and PkeyCtxRef::derive) sets len = buf.len() and passes it as the in/out length to EVP_PKEY_derive, relying on OpenSSL to honor it. On OpenSSL 1.1.x, X25519, X448, DH and HKDF-extract ignore the incoming *keylen, unconditionally writing the full shared secret (32/56/prime-size bytes). A caller passing a short slice gets a heap/stack overflow from safe code. OpenSSL 3.x providers do check, so this only impacts older OpenSSL. This vulnerability is fixed in 0.10.78.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41676",
"url": "https://www.suse.com/security/cve/CVE-2026-41676"
},
{
"category": "external",
"summary": "SUSE Bug 1270137 for CVE-2026-41676",
"url": "https://bugzilla.suse.com/1270137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.3-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.3-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.3-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-07T16:59:27Z",
"details": "moderate"
}
],
"title": "CVE-2026-41676"
}
]
}
SUSE-SU-2026:2833-1
Vulnerability from csaf_suse - Published: 2026-07-09 19:10 - Updated: 2026-07-09 19:10Summary
Security update for clamav
Severity
Important
Notes
Title of the patch: Security update for clamav
Description of the patch: This update for clamav fixes the following issues
- CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service
(bsc#1270107).
- CVE-2026-20214: FSG file format parser could allow an unauthenticated, remote attacker to cause a denial of service
(bsc#1270085).
- CVE-2026-20215: 7z file format parser could allow an unauthenticated, remote attacker to cause a denial of service
(bsc#1270088).
- CVE-2026-20216: InstallShield file format parser could allow an unauthenticated, remote attacker to cause a denial of
service (bsc#1270089).
- CVE-2026-20217: PESpin file format parser could allow an unauthenticated, remote attacker to cause a denial of service
(bsc#1270091).
- CVE-2026-20243: ALZ file format parser could allow an unauthenticated, remote attacker to cause a denial of service
(bsc#1270092).
- CVE-2026-20244: DMG file format parser could allow an unauthenticated, remote attacker to cause a denial of service
on 32-bit platforms only (bsc#1270106).
- CVE-2026-41676: rust-openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1
(bsc#1270138).
Changes for clamav:
- Update to 1.5.3:
* Hardened clamscan, clamdscan, and clamonacc quarantine actions against
time-of-check/time-of-use races that could redirect copied, moved, or removed
files under unsafe quarantine directory configurations.
* Raised the minimum required CMake version to 3.17 to fix Linux builds with
libcurl v8.21.0 when linking static library dependencies.
* Metadata preclass scans now run before the final scan verdict.
* ClamOnAcc: Fixed errors when recursively excluded paths are children of an
included path.
* ClamOnAcc: Fixed hash bucket list corruption when two watched paths collide
in the same bucket.
Patchnames: SUSE-2026-2833,SUSE-SLE-SERVER-12-SP5-LTSS-2026-2833,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2833
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
36 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/s… | self |
| https://www.suse.com/support/update/announcement/… | self |
| https://lists.suse.com/pipermail/sle-updates/2026… | self |
| https://bugzilla.suse.com/1270085 | self |
| https://bugzilla.suse.com/1270088 | self |
| https://bugzilla.suse.com/1270089 | self |
| https://bugzilla.suse.com/1270091 | self |
| https://bugzilla.suse.com/1270092 | self |
| https://bugzilla.suse.com/1270106 | self |
| https://bugzilla.suse.com/1270107 | self |
| https://bugzilla.suse.com/1270138 | self |
| https://www.suse.com/security/cve/CVE-2026-20213/ | self |
| https://www.suse.com/security/cve/CVE-2026-20214/ | self |
| https://www.suse.com/security/cve/CVE-2026-20215/ | self |
| https://www.suse.com/security/cve/CVE-2026-20216/ | self |
| https://www.suse.com/security/cve/CVE-2026-20217/ | self |
| https://www.suse.com/security/cve/CVE-2026-20243/ | self |
| https://www.suse.com/security/cve/CVE-2026-20244/ | self |
| https://www.suse.com/security/cve/CVE-2026-41676/ | self |
| https://www.suse.com/security/cve/CVE-2026-20213 | external |
| https://bugzilla.suse.com/1270107 | external |
| https://www.suse.com/security/cve/CVE-2026-20214 | external |
| https://bugzilla.suse.com/1270085 | external |
| https://www.suse.com/security/cve/CVE-2026-20215 | external |
| https://bugzilla.suse.com/1270088 | external |
| https://www.suse.com/security/cve/CVE-2026-20216 | external |
| https://bugzilla.suse.com/1270089 | external |
| https://www.suse.com/security/cve/CVE-2026-20217 | external |
| https://bugzilla.suse.com/1270091 | external |
| https://www.suse.com/security/cve/CVE-2026-20243 | external |
| https://bugzilla.suse.com/1270092 | external |
| https://www.suse.com/security/cve/CVE-2026-20244 | external |
| https://bugzilla.suse.com/1270106 | external |
| https://www.suse.com/security/cve/CVE-2026-41676 | external |
| https://bugzilla.suse.com/1270137 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for clamav",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for clamav fixes the following issues\n\n- CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service\n (bsc#1270107).\n- CVE-2026-20214: FSG file format parser could allow an unauthenticated, remote attacker to cause a denial of service\n (bsc#1270085).\n- CVE-2026-20215: 7z file format parser could allow an unauthenticated, remote attacker to cause a denial of service\n (bsc#1270088).\n- CVE-2026-20216: InstallShield file format parser could allow an unauthenticated, remote attacker to cause a denial of\n service (bsc#1270089).\n- CVE-2026-20217: PESpin file format parser could allow an unauthenticated, remote attacker to cause a denial of service\n (bsc#1270091).\n- CVE-2026-20243: ALZ file format parser could allow an unauthenticated, remote attacker to cause a denial of service\n (bsc#1270092).\n- CVE-2026-20244: DMG file format parser could allow an unauthenticated, remote attacker to cause a denial of service\n on 32-bit platforms only (bsc#1270106).\n- CVE-2026-41676: rust-openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1\n (bsc#1270138).\n\nChanges for clamav:\n\n- Update to 1.5.3:\n \n * Hardened clamscan, clamdscan, and clamonacc quarantine actions against\n time-of-check/time-of-use races that could redirect copied, moved, or removed\n files under unsafe quarantine directory configurations.\n * Raised the minimum required CMake version to 3.17 to fix Linux builds with\n libcurl v8.21.0 when linking static library dependencies.\n * Metadata preclass scans now run before the final scan verdict.\n * ClamOnAcc: Fixed errors when recursively excluded paths are children of an\n included path.\n * ClamOnAcc: Fixed hash bucket list corruption when two watched paths collide\n in the same bucket.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2833,SUSE-SLE-SERVER-12-SP5-LTSS-2026-2833,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2833",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2833-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2833-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262833-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2833-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/048067.html"
},
{
"category": "self",
"summary": "SUSE Bug 1270085",
"url": "https://bugzilla.suse.com/1270085"
},
{
"category": "self",
"summary": "SUSE Bug 1270088",
"url": "https://bugzilla.suse.com/1270088"
},
{
"category": "self",
"summary": "SUSE Bug 1270089",
"url": "https://bugzilla.suse.com/1270089"
},
{
"category": "self",
"summary": "SUSE Bug 1270091",
"url": "https://bugzilla.suse.com/1270091"
},
{
"category": "self",
"summary": "SUSE Bug 1270092",
"url": "https://bugzilla.suse.com/1270092"
},
{
"category": "self",
"summary": "SUSE Bug 1270106",
"url": "https://bugzilla.suse.com/1270106"
},
{
"category": "self",
"summary": "SUSE Bug 1270107",
"url": "https://bugzilla.suse.com/1270107"
},
{
"category": "self",
"summary": "SUSE Bug 1270138",
"url": "https://bugzilla.suse.com/1270138"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20213 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20214 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20215 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20216 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20217 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20243 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20243/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20244 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20244/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41676 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41676/"
}
],
"title": "Security update for clamav",
"tracking": {
"current_release_date": "2026-07-09T19:10:57Z",
"generator": {
"date": "2026-07-09T19:10:57Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2833-1",
"initial_release_date": "2026-07-09T19:10:57Z",
"revision_history": [
{
"date": "2026-07-09T19:10:57Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.3-3.56.1.aarch64",
"product": {
"name": "clamav-1.5.3-3.56.1.aarch64",
"product_id": "clamav-1.5.3-3.56.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.3-3.56.1.aarch64",
"product": {
"name": "clamav-devel-1.5.3-3.56.1.aarch64",
"product_id": "clamav-devel-1.5.3-3.56.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.3-3.56.1.aarch64",
"product": {
"name": "clamav-milter-1.5.3-3.56.1.aarch64",
"product_id": "clamav-milter-1.5.3-3.56.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.3-3.56.1.aarch64",
"product": {
"name": "libclamav12-1.5.3-3.56.1.aarch64",
"product_id": "libclamav12-1.5.3-3.56.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.3-3.56.1.aarch64",
"product": {
"name": "libclammspack0-1.5.3-3.56.1.aarch64",
"product_id": "libclammspack0-1.5.3-3.56.1.aarch64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.3-3.56.1.aarch64",
"product": {
"name": "libfreshclam4-1.5.3-3.56.1.aarch64",
"product_id": "libfreshclam4-1.5.3-3.56.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-docs-html-1.5.3-3.56.1.noarch",
"product": {
"name": "clamav-docs-html-1.5.3-3.56.1.noarch",
"product_id": "clamav-docs-html-1.5.3-3.56.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.3-3.56.1.ppc64le",
"product": {
"name": "clamav-1.5.3-3.56.1.ppc64le",
"product_id": "clamav-1.5.3-3.56.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.3-3.56.1.ppc64le",
"product": {
"name": "clamav-devel-1.5.3-3.56.1.ppc64le",
"product_id": "clamav-devel-1.5.3-3.56.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.3-3.56.1.ppc64le",
"product": {
"name": "clamav-milter-1.5.3-3.56.1.ppc64le",
"product_id": "clamav-milter-1.5.3-3.56.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.3-3.56.1.ppc64le",
"product": {
"name": "libclamav12-1.5.3-3.56.1.ppc64le",
"product_id": "libclamav12-1.5.3-3.56.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.3-3.56.1.ppc64le",
"product": {
"name": "libclammspack0-1.5.3-3.56.1.ppc64le",
"product_id": "libclammspack0-1.5.3-3.56.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.3-3.56.1.ppc64le",
"product": {
"name": "libfreshclam4-1.5.3-3.56.1.ppc64le",
"product_id": "libfreshclam4-1.5.3-3.56.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.3-3.56.1.s390x",
"product": {
"name": "clamav-1.5.3-3.56.1.s390x",
"product_id": "clamav-1.5.3-3.56.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.3-3.56.1.s390x",
"product": {
"name": "clamav-devel-1.5.3-3.56.1.s390x",
"product_id": "clamav-devel-1.5.3-3.56.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.3-3.56.1.s390x",
"product": {
"name": "clamav-milter-1.5.3-3.56.1.s390x",
"product_id": "clamav-milter-1.5.3-3.56.1.s390x"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.3-3.56.1.s390x",
"product": {
"name": "libclamav12-1.5.3-3.56.1.s390x",
"product_id": "libclamav12-1.5.3-3.56.1.s390x"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.3-3.56.1.s390x",
"product": {
"name": "libclammspack0-1.5.3-3.56.1.s390x",
"product_id": "libclammspack0-1.5.3-3.56.1.s390x"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.3-3.56.1.s390x",
"product": {
"name": "libfreshclam4-1.5.3-3.56.1.s390x",
"product_id": "libfreshclam4-1.5.3-3.56.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.3-3.56.1.x86_64",
"product": {
"name": "clamav-1.5.3-3.56.1.x86_64",
"product_id": "clamav-1.5.3-3.56.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.3-3.56.1.x86_64",
"product": {
"name": "clamav-devel-1.5.3-3.56.1.x86_64",
"product_id": "clamav-devel-1.5.3-3.56.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.3-3.56.1.x86_64",
"product": {
"name": "clamav-milter-1.5.3-3.56.1.x86_64",
"product_id": "clamav-milter-1.5.3-3.56.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.3-3.56.1.x86_64",
"product": {
"name": "libclamav12-1.5.3-3.56.1.x86_64",
"product_id": "libclamav12-1.5.3-3.56.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.3-3.56.1.x86_64",
"product": {
"name": "libclammspack0-1.5.3-3.56.1.x86_64",
"product_id": "libclammspack0-1.5.3-3.56.1.x86_64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.3-3.56.1.x86_64",
"product": {
"name": "libfreshclam4-1.5.3-3.56.1.x86_64",
"product_id": "libfreshclam4-1.5.3-3.56.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-3.56.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64"
},
"product_reference": "clamav-1.5.3-3.56.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-3.56.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le"
},
"product_reference": "clamav-1.5.3-3.56.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-3.56.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x"
},
"product_reference": "clamav-1.5.3-3.56.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64"
},
"product_reference": "clamav-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-3.56.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64"
},
"product_reference": "clamav-devel-1.5.3-3.56.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-3.56.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le"
},
"product_reference": "clamav-devel-1.5.3-3.56.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-3.56.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x"
},
"product_reference": "clamav-devel-1.5.3-3.56.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64"
},
"product_reference": "clamav-devel-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.3-3.56.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch"
},
"product_reference": "clamav-docs-html-1.5.3-3.56.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-3.56.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64"
},
"product_reference": "clamav-milter-1.5.3-3.56.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-3.56.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le"
},
"product_reference": "clamav-milter-1.5.3-3.56.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-3.56.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x"
},
"product_reference": "clamav-milter-1.5.3-3.56.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64"
},
"product_reference": "clamav-milter-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-3.56.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64"
},
"product_reference": "libclamav12-1.5.3-3.56.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-3.56.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le"
},
"product_reference": "libclamav12-1.5.3-3.56.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-3.56.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x"
},
"product_reference": "libclamav12-1.5.3-3.56.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64"
},
"product_reference": "libclamav12-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-3.56.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64"
},
"product_reference": "libclammspack0-1.5.3-3.56.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-3.56.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le"
},
"product_reference": "libclammspack0-1.5.3-3.56.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-3.56.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x"
},
"product_reference": "libclammspack0-1.5.3-3.56.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64"
},
"product_reference": "libclammspack0-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-3.56.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64"
},
"product_reference": "libfreshclam4-1.5.3-3.56.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-3.56.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le"
},
"product_reference": "libfreshclam4-1.5.3-3.56.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-3.56.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x"
},
"product_reference": "libfreshclam4-1.5.3-3.56.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-3.56.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64"
},
"product_reference": "clamav-1.5.3-3.56.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-3.56.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le"
},
"product_reference": "clamav-1.5.3-3.56.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-3.56.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x"
},
"product_reference": "clamav-1.5.3-3.56.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64"
},
"product_reference": "clamav-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-3.56.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64"
},
"product_reference": "clamav-devel-1.5.3-3.56.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-3.56.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le"
},
"product_reference": "clamav-devel-1.5.3-3.56.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-3.56.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x"
},
"product_reference": "clamav-devel-1.5.3-3.56.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64"
},
"product_reference": "clamav-devel-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.3-3.56.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch"
},
"product_reference": "clamav-docs-html-1.5.3-3.56.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-3.56.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64"
},
"product_reference": "clamav-milter-1.5.3-3.56.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-3.56.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le"
},
"product_reference": "clamav-milter-1.5.3-3.56.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-3.56.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x"
},
"product_reference": "clamav-milter-1.5.3-3.56.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64"
},
"product_reference": "clamav-milter-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-3.56.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64"
},
"product_reference": "libclamav12-1.5.3-3.56.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-3.56.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le"
},
"product_reference": "libclamav12-1.5.3-3.56.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-3.56.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x"
},
"product_reference": "libclamav12-1.5.3-3.56.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64"
},
"product_reference": "libclamav12-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-3.56.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64"
},
"product_reference": "libclammspack0-1.5.3-3.56.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-3.56.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le"
},
"product_reference": "libclammspack0-1.5.3-3.56.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-3.56.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x"
},
"product_reference": "libclammspack0-1.5.3-3.56.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64"
},
"product_reference": "libclammspack0-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-3.56.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64"
},
"product_reference": "libfreshclam4-1.5.3-3.56.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-3.56.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le"
},
"product_reference": "libfreshclam4-1.5.3-3.56.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-3.56.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x"
},
"product_reference": "libfreshclam4-1.5.3-3.56.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64"
},
"product_reference": "clamav-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64"
},
"product_reference": "clamav-devel-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.3-3.56.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch"
},
"product_reference": "clamav-docs-html-1.5.3-3.56.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64"
},
"product_reference": "clamav-milter-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64"
},
"product_reference": "libclamav12-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64"
},
"product_reference": "libclammspack0-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.3-3.56.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.3-3.56.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-20213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20213"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20213",
"url": "https://www.suse.com/security/cve/CVE-2026-20213"
},
{
"category": "external",
"summary": "SUSE Bug 1270107 for CVE-2026-20213",
"url": "https://bugzilla.suse.com/1270107"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-09T19:10:57Z",
"details": "important"
}
],
"title": "CVE-2026-20213"
},
{
"cve": "CVE-2026-20214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20214"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains portable executable content compressed with FSG to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20214",
"url": "https://www.suse.com/security/cve/CVE-2026-20214"
},
{
"category": "external",
"summary": "SUSE Bug 1270085 for CVE-2026-20214",
"url": "https://bugzilla.suse.com/1270085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-09T19:10:57Z",
"details": "important"
}
],
"title": "CVE-2026-20214"
},
{
"cve": "CVE-2026-20215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20215"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in 7z files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains 7z\u0026nbsp;content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20215",
"url": "https://www.suse.com/security/cve/CVE-2026-20215"
},
{
"category": "external",
"summary": "SUSE Bug 1270088 for CVE-2026-20215",
"url": "https://bugzilla.suse.com/1270088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-09T19:10:57Z",
"details": "important"
}
],
"title": "CVE-2026-20215"
},
{
"cve": "CVE-2026-20216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20216"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20216",
"url": "https://www.suse.com/security/cve/CVE-2026-20216"
},
{
"category": "external",
"summary": "SUSE Bug 1270089 for CVE-2026-20216",
"url": "https://bugzilla.suse.com/1270089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-09T19:10:57Z",
"details": "important"
}
],
"title": "CVE-2026-20216"
},
{
"cve": "CVE-2026-20217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20217"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20217",
"url": "https://www.suse.com/security/cve/CVE-2026-20217"
},
{
"category": "external",
"summary": "SUSE Bug 1270091 for CVE-2026-20217",
"url": "https://bugzilla.suse.com/1270091"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-09T19:10:57Z",
"details": "important"
}
],
"title": "CVE-2026-20217"
},
{
"cve": "CVE-2026-20243",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20243"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in ALZ files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains ALZ content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20243",
"url": "https://www.suse.com/security/cve/CVE-2026-20243"
},
{
"category": "external",
"summary": "SUSE Bug 1270092 for CVE-2026-20243",
"url": "https://bugzilla.suse.com/1270092"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-09T19:10:57Z",
"details": "important"
}
],
"title": "CVE-2026-20243"
},
{
"cve": "CVE-2026-20244",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20244"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in DMG files during scanning, which may result in an integer overflow on 32-bit platforms only. An attacker could exploit this vulnerability by submitting a crafted file that contains DMG content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20244",
"url": "https://www.suse.com/security/cve/CVE-2026-20244"
},
{
"category": "external",
"summary": "SUSE Bug 1270106 for CVE-2026-20244",
"url": "https://bugzilla.suse.com/1270106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-09T19:10:57Z",
"details": "important"
}
],
"title": "CVE-2026-20244"
},
{
"cve": "CVE-2026-41676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41676"
}
],
"notes": [
{
"category": "general",
"text": "rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::derive (and PkeyCtxRef::derive) sets len = buf.len() and passes it as the in/out length to EVP_PKEY_derive, relying on OpenSSL to honor it. On OpenSSL 1.1.x, X25519, X448, DH and HKDF-extract ignore the incoming *keylen, unconditionally writing the full shared secret (32/56/prime-size bytes). A caller passing a short slice gets a heap/stack overflow from safe code. OpenSSL 3.x providers do check, so this only impacts older OpenSSL. This vulnerability is fixed in 0.10.78.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41676",
"url": "https://www.suse.com/security/cve/CVE-2026-41676"
},
{
"category": "external",
"summary": "SUSE Bug 1270137 for CVE-2026-41676",
"url": "https://bugzilla.suse.com/1270137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.3-3.56.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.3-3.56.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.3-3.56.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-09T19:10:57Z",
"details": "moderate"
}
],
"title": "CVE-2026-41676"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…