Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-1989

Fixed in a distro release EPSS 6%

Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.

Published 2006-05-01 · CVE record · OSV

Products: clam_anti-virus clamav

Distro releases

ReleasePackageFixed in
Debian 12clamav0.88.2
Debian 13clamav0.88.2
Debian 14clamav0.88.2
Debian 3.1clamav0.84-2.sarge.9
openSUSE Tumbleweedclamav0.103.3-1.4