CLSA-2025-1756923561
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2025-1756923561.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2025-1756923561
- Upstream
- Published
- 2025-09-03T18:19:25Z
- Modified
- 2026-05-27T11:35:17.371786705Z
- Summary
- clamav: Fix of 8 CVEs
- Details
-
- Update to 1.0.9 LTS version
- CVE-2025-20260: Fixed a possible buffer overflow write bug in the PDF file parser
- CVE-2025-20128: Fixed a possible buffer overflow read bug in the OLE2 file parser
- CVE-2024-20506: Changed the logging module to disable following symlinks on Linux and Unix systems so as to prevent an attacker with existing access to the 'clamd' or 'freshclam' services from using a symlink to corrupt system files
- CVE-2024-20290: Fixed a possible heap overflow read bug in the OLE2 file parser
- CVE-2024-20328: Fixed a possible command injection in the 'VirusEvent' feature of the clamd service
- CVE-2023-20197: Fixed a possible denial of service in the HFS+ parser
- CVE-2023-20212: Fixed a possible DoS in the AutoIT file parser
- CVE-2023-20052: Fixed a possible remote information leak in the DMG file parser
- References