Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

ClamAV could let attackers run code

published 1 month ago

Summary

Older versions of the ClamAV scanner may let a malicious file cause the program to execute unwanted code. This could give an attacker the ability to control the system where ClamAV is running. Update to the newest ClamAV release as soon as possible to remove the risk.

What to do

Update cleanstart clamav to version 0.99.4-r0.

Affected software

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	clamav	< 0.99.4-r0 Fix: upgrade to 0.99.4-r0

Original advisory text

Security fix for CVE-2018-0202 applied in: clamav 0.99.4-r0

Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details.

References

https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
https://osv.dev/vulnerability/CVE-2018-0202 URL
https://nvd.nist.gov/vuln/detail/CVE-2018-0202 URL

Timeline

Published18 Sep 2026

Updated18 Sep 2026

First seen18 Sep 2026

Sources

CLEANSTART-2026-CA69307 · OSV

Track software like this

Free during beta