cbcvebase.
CVE-2014-9328
published 2015-02-03

CVE-2014-9328: ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition."

PriorityP338high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
3.23%
86.9th percentile
ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition."

Affected

8 ranges
VendorProductVersion rangeFixed in
clamavclamav<= 0.98.5—
clamavclamav>= 0 < 0.98.6+dfsg-10.98.6+dfsg-1
clamavclamav>= 0 < 0.98.6+dfsg-10.98.6+dfsg-1
clamavclamav>= 0 < 0.98.6+dfsg-10.98.6+dfsg-1
clamavclamav>= 0 < 0.98.6+dfsg-10.98.6+dfsg-1
debianclamav< clamav 0.98.6+dfsg-1 (bookworm)clamav 0.98.6+dfsg-1 (bookworm)
fedoraprojectfedora——
fedoraprojectfedora——

CVSS provenance

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.