Patchwire CVEs, their patch status, and feeds to follow them

CVE-2008-1387

Fixed in a distro release EPSS 4%

ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

Published 2008-04-16 · CVE record · OSV

Products: clam_anti-virus clamav

Distro releases

ReleasePackageFixed in
Debian 12clamav0.92.1~dfsg2-1
Debian 13clamav0.92.1~dfsg2-1
Debian 14clamav0.92.1~dfsg2-1