Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-20031 (GCVE-0-2026-20031)
Vulnerability from cvelistv5 – Published: 2026-03-04 17:17 – Updated: 2026-03-05 15:52
VLAI?
EPSS
Title
ClamAV CSS Image Parsing Error Handling Denial of Service Vulnerability
Summary
A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.
Severity ?
5.3 (Medium)
CWE
- CWE-248 - Uncaught Exception
Assigner
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Cisco | Cisco Secure Endpoint |
Affected:
7.0.5
Affected: 6.2.19 Affected: 7.3.3 Affected: 7.2.13 Affected: 6.1.5 Affected: 6.3.1 Affected: 6.2.5 Affected: 7.3.5 Affected: 6.2.1 Affected: 7.2.7 Affected: 7.1.1 Affected: 6.3.5 Affected: 6.2.9 Affected: 7.3.1 Affected: 6.1.7 Affected: 7.2.11 Affected: 7.2.3 Affected: 7.1.5 Affected: 6.3.3 Affected: 7.3.9 Affected: 6.2.3 Affected: 6.1.9 Affected: 6.0.9 Affected: 7.2.5 Affected: 6.0.7 Affected: 6.3.7 Affected: 1.12.3 Affected: 1.8.0 Affected: 1.11.1 Affected: 1.12.4 Affected: 1.10.0 Affected: 1.12.0 Affected: 1.8.1 Affected: 1.10.1 Affected: 1.12.1 Affected: 1.12.6 Affected: 1.14.0 Affected: 1.10.2 Affected: 1.12.7 Affected: 1.12.2 Affected: 1.6.0 Affected: 1.9.0 Affected: 1.11.0 Affected: 1.7.0 Affected: 1.13.0 Affected: 1.8.4 Affected: 1.13.1 Affected: 1.9.1 Affected: 1.12.5 Affected: 1.13.2 Affected: 2.0.2 Affected: 1.1.0 Affected: 2.0.0 Affected: 2.0.1 Affected: 8.1.7.21512 Affected: 8.1.7 Affected: 8.1.5 Affected: 8.1.3.21242 Affected: 8.1.3 Affected: 8.1.5.21322 Affected: 8.1.7.21417 Affected: 2.1.0.14 Affected: 2.2.0 Affected: 2.3.0 Affected: 2.4.0 Affected: 2.5.0 Affected: 2.6.0 Affected: 2.7.0 Affected: 2.8.0 Affected: 2.9.0 Affected: 2.10.0 Affected: 2.10.1 Affected: 2.11.0 Affected: 1.14.1 Affected: 1.15.1 Affected: 1.15.2 Affected: 1.15.3 Affected: 1.15.4 Affected: 1.15.5 Affected: 1.15.6 Affected: 1.16.0 Affected: 1.16.1 Affected: 1.16.2 Affected: 1.16.3 Affected: 1.18.0 Affected: 1.18.1 Affected: 1.20.0 Affected: 1.21.0 Affected: 1.21.1 Affected: 1.21.2 Affected: 1.21.3 Affected: 1.22.0 Affected: 1.22.1 Affected: 1.22.2 Affected: 1.22.3 Affected: 1.22.4 Affected: 1.24.0 Affected: 1.24.1 Affected: 1.24.2 Affected: 1.24.3 Affected: 1.24.4 Affected: 1.26.0 Affected: 1.24.5 Affected: 1.26.1 Affected: 1.27.0 Affected: 1.15.0 Affected: 1.17.0 Affected: 1.17.1 Affected: 1.17.2 Affected: 1.19.0 Affected: 1.20.1 Affected: 1.20.2 Affected: 1.20.3 Affected: 1.20.4 Affected: 1.20.5 Affected: 1.20.6 Affected: 1.23.0 Affected: 1.23.1 Affected: 1.20.7 Affected: 1.20.8 Affected: 1.25.0 Affected: 1.25.1 Affected: 1.25.2 Affected: 1.27.1 Affected: 1.27.2 Affected: 7.3.13 Affected: 7.3.15 Affected: 7.4.1 Affected: 7.4.1.20425 Affected: 7.4.1.20439 Affected: 7.4.3 Affected: 7.4.3.20679 Affected: 7.4.5 Affected: 7.5.1.20813 Affected: 7.5.1.20833 Affected: 7.5.3 Affected: 7.5.5 Affected: 8.0.1.21160 Affected: 8.0.1.21164 Affected: 7.5.7 Affected: 7.5.9 Affected: 7.5.11 Affected: 8.1.7.21585 Affected: 7.5.13.21586 Affected: 7.5.13.21598 Affected: 8.2.1.21612 Affected: 8.2.1.21650 Affected: 7.5.15.21611 Affected: 7.5.17.21680 Affected: 8.2.3.30119 Affected: 8.2.4.30130 Affected: 8.4.0 Affected: 7.5.19 Affected: 8.4.1.30298 Affected: 8.4.2.30317 Affected: 8.4.1.30307 Affected: 7.5.20 Affected: 8.4.3 Affected: 8.4.4.30419 Affected: 8.4.4.30467 Affected: 7.5.21.21732 Affected: 8.4.5.30483 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20031",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-05T15:51:58.298217Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-03-05T15:52:07.708Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Endpoint",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "6.2.19"
},
{
"status": "affected",
"version": "7.3.3"
},
{
"status": "affected",
"version": "7.2.13"
},
{
"status": "affected",
"version": "6.1.5"
},
{
"status": "affected",
"version": "6.3.1"
},
{
"status": "affected",
"version": "6.2.5"
},
{
"status": "affected",
"version": "7.3.5"
},
{
"status": "affected",
"version": "6.2.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.1.1"
},
{
"status": "affected",
"version": "6.3.5"
},
{
"status": "affected",
"version": "6.2.9"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "6.1.7"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.1.5"
},
{
"status": "affected",
"version": "6.3.3"
},
{
"status": "affected",
"version": "7.3.9"
},
{
"status": "affected",
"version": "6.2.3"
},
{
"status": "affected",
"version": "6.1.9"
},
{
"status": "affected",
"version": "6.0.9"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "6.0.7"
},
{
"status": "affected",
"version": "6.3.7"
},
{
"status": "affected",
"version": "1.12.3"
},
{
"status": "affected",
"version": "1.8.0"
},
{
"status": "affected",
"version": "1.11.1"
},
{
"status": "affected",
"version": "1.12.4"
},
{
"status": "affected",
"version": "1.10.0"
},
{
"status": "affected",
"version": "1.12.0"
},
{
"status": "affected",
"version": "1.8.1"
},
{
"status": "affected",
"version": "1.10.1"
},
{
"status": "affected",
"version": "1.12.1"
},
{
"status": "affected",
"version": "1.12.6"
},
{
"status": "affected",
"version": "1.14.0"
},
{
"status": "affected",
"version": "1.10.2"
},
{
"status": "affected",
"version": "1.12.7"
},
{
"status": "affected",
"version": "1.12.2"
},
{
"status": "affected",
"version": "1.6.0"
},
{
"status": "affected",
"version": "1.9.0"
},
{
"status": "affected",
"version": "1.11.0"
},
{
"status": "affected",
"version": "1.7.0"
},
{
"status": "affected",
"version": "1.13.0"
},
{
"status": "affected",
"version": "1.8.4"
},
{
"status": "affected",
"version": "1.13.1"
},
{
"status": "affected",
"version": "1.9.1"
},
{
"status": "affected",
"version": "1.12.5"
},
{
"status": "affected",
"version": "1.13.2"
},
{
"status": "affected",
"version": "2.0.2"
},
{
"status": "affected",
"version": "1.1.0"
},
{
"status": "affected",
"version": "2.0.0"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "8.1.7.21512"
},
{
"status": "affected",
"version": "8.1.7"
},
{
"status": "affected",
"version": "8.1.5"
},
{
"status": "affected",
"version": "8.1.3.21242"
},
{
"status": "affected",
"version": "8.1.3"
},
{
"status": "affected",
"version": "8.1.5.21322"
},
{
"status": "affected",
"version": "8.1.7.21417"
},
{
"status": "affected",
"version": "2.1.0.14"
},
{
"status": "affected",
"version": "2.2.0"
},
{
"status": "affected",
"version": "2.3.0"
},
{
"status": "affected",
"version": "2.4.0"
},
{
"status": "affected",
"version": "2.5.0"
},
{
"status": "affected",
"version": "2.6.0"
},
{
"status": "affected",
"version": "2.7.0"
},
{
"status": "affected",
"version": "2.8.0"
},
{
"status": "affected",
"version": "2.9.0"
},
{
"status": "affected",
"version": "2.10.0"
},
{
"status": "affected",
"version": "2.10.1"
},
{
"status": "affected",
"version": "2.11.0"
},
{
"status": "affected",
"version": "1.14.1"
},
{
"status": "affected",
"version": "1.15.1"
},
{
"status": "affected",
"version": "1.15.2"
},
{
"status": "affected",
"version": "1.15.3"
},
{
"status": "affected",
"version": "1.15.4"
},
{
"status": "affected",
"version": "1.15.5"
},
{
"status": "affected",
"version": "1.15.6"
},
{
"status": "affected",
"version": "1.16.0"
},
{
"status": "affected",
"version": "1.16.1"
},
{
"status": "affected",
"version": "1.16.2"
},
{
"status": "affected",
"version": "1.16.3"
},
{
"status": "affected",
"version": "1.18.0"
},
{
"status": "affected",
"version": "1.18.1"
},
{
"status": "affected",
"version": "1.20.0"
},
{
"status": "affected",
"version": "1.21.0"
},
{
"status": "affected",
"version": "1.21.1"
},
{
"status": "affected",
"version": "1.21.2"
},
{
"status": "affected",
"version": "1.21.3"
},
{
"status": "affected",
"version": "1.22.0"
},
{
"status": "affected",
"version": "1.22.1"
},
{
"status": "affected",
"version": "1.22.2"
},
{
"status": "affected",
"version": "1.22.3"
},
{
"status": "affected",
"version": "1.22.4"
},
{
"status": "affected",
"version": "1.24.0"
},
{
"status": "affected",
"version": "1.24.1"
},
{
"status": "affected",
"version": "1.24.2"
},
{
"status": "affected",
"version": "1.24.3"
},
{
"status": "affected",
"version": "1.24.4"
},
{
"status": "affected",
"version": "1.26.0"
},
{
"status": "affected",
"version": "1.24.5"
},
{
"status": "affected",
"version": "1.26.1"
},
{
"status": "affected",
"version": "1.27.0"
},
{
"status": "affected",
"version": "1.15.0"
},
{
"status": "affected",
"version": "1.17.0"
},
{
"status": "affected",
"version": "1.17.1"
},
{
"status": "affected",
"version": "1.17.2"
},
{
"status": "affected",
"version": "1.19.0"
},
{
"status": "affected",
"version": "1.20.1"
},
{
"status": "affected",
"version": "1.20.2"
},
{
"status": "affected",
"version": "1.20.3"
},
{
"status": "affected",
"version": "1.20.4"
},
{
"status": "affected",
"version": "1.20.5"
},
{
"status": "affected",
"version": "1.20.6"
},
{
"status": "affected",
"version": "1.23.0"
},
{
"status": "affected",
"version": "1.23.1"
},
{
"status": "affected",
"version": "1.20.7"
},
{
"status": "affected",
"version": "1.20.8"
},
{
"status": "affected",
"version": "1.25.0"
},
{
"status": "affected",
"version": "1.25.1"
},
{
"status": "affected",
"version": "1.25.2"
},
{
"status": "affected",
"version": "1.27.1"
},
{
"status": "affected",
"version": "1.27.2"
},
{
"status": "affected",
"version": "7.3.13"
},
{
"status": "affected",
"version": "7.3.15"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.4.1.20425"
},
{
"status": "affected",
"version": "7.4.1.20439"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.4.3.20679"
},
{
"status": "affected",
"version": "7.4.5"
},
{
"status": "affected",
"version": "7.5.1.20813"
},
{
"status": "affected",
"version": "7.5.1.20833"
},
{
"status": "affected",
"version": "7.5.3"
},
{
"status": "affected",
"version": "7.5.5"
},
{
"status": "affected",
"version": "8.0.1.21160"
},
{
"status": "affected",
"version": "8.0.1.21164"
},
{
"status": "affected",
"version": "7.5.7"
},
{
"status": "affected",
"version": "7.5.9"
},
{
"status": "affected",
"version": "7.5.11"
},
{
"status": "affected",
"version": "8.1.7.21585"
},
{
"status": "affected",
"version": "7.5.13.21586"
},
{
"status": "affected",
"version": "7.5.13.21598"
},
{
"status": "affected",
"version": "8.2.1.21612"
},
{
"status": "affected",
"version": "8.2.1.21650"
},
{
"status": "affected",
"version": "7.5.15.21611"
},
{
"status": "affected",
"version": "7.5.17.21680"
},
{
"status": "affected",
"version": "8.2.3.30119"
},
{
"status": "affected",
"version": "8.2.4.30130"
},
{
"status": "affected",
"version": "8.4.0"
},
{
"status": "affected",
"version": "7.5.19"
},
{
"status": "affected",
"version": "8.4.1.30298"
},
{
"status": "affected",
"version": "8.4.2.30317"
},
{
"status": "affected",
"version": "8.4.1.30307"
},
{
"status": "affected",
"version": "7.5.20"
},
{
"status": "affected",
"version": "8.4.3"
},
{
"status": "affected",
"version": "8.4.4.30419"
},
{
"status": "affected",
"version": "8.4.4.30467"
},
{
"status": "affected",
"version": "7.5.21.21732"
},
{
"status": "affected",
"version": "8.4.5.30483"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-248",
"description": "Uncaught Exception",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-04T17:44:55.869Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-clamav-css-Fn4QSZ",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ"
}
],
"source": {
"advisory": "cisco-sa-clamav-css-Fn4QSZ",
"defects": [
"CSCwq32780"
],
"discovery": "EXTERNAL"
},
"title": "ClamAV CSS Image Parsing Error Handling Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20031",
"datePublished": "2026-03-04T17:17:33.372Z",
"dateReserved": "2025-10-08T11:59:15.353Z",
"dateUpdated": "2026-03-05T15:52:07.708Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-20031",
"date": "2026-05-01",
"epss": "0.00041",
"percentile": "0.1214"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-20031\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2026-03-04T18:16:16.773\",\"lastModified\":\"2026-03-05T19:39:11.967\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\\r\\n\\r\\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-248\"}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ\",\"source\":\"psirt@cisco.com\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-20031\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-05T15:51:58.298217Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-05T15:52:03.337Z\"}}], \"cna\": {\"title\": \"ClamAV CSS Image Parsing Error Handling Denial of Service Vulnerability\", \"source\": {\"defects\": [\"CSCwq32780\"], \"advisory\": \"cisco-sa-clamav-css-Fn4QSZ\", \"discovery\": \"EXTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Secure Endpoint\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.0.5\"}, {\"status\": \"affected\", \"version\": \"6.2.19\"}, {\"status\": \"affected\", \"version\": \"7.3.3\"}, {\"status\": \"affected\", \"version\": \"7.2.13\"}, {\"status\": \"affected\", \"version\": \"6.1.5\"}, {\"status\": \"affected\", \"version\": \"6.3.1\"}, {\"status\": \"affected\", \"version\": \"6.2.5\"}, {\"status\": \"affected\", \"version\": \"7.3.5\"}, {\"status\": \"affected\", \"version\": \"6.2.1\"}, {\"status\": \"affected\", \"version\": \"7.2.7\"}, {\"status\": \"affected\", \"version\": \"7.1.1\"}, {\"status\": \"affected\", \"version\": \"6.3.5\"}, {\"status\": \"affected\", \"version\": \"6.2.9\"}, {\"status\": \"affected\", \"version\": \"7.3.1\"}, {\"status\": \"affected\", \"version\": \"6.1.7\"}, {\"status\": \"affected\", \"version\": \"7.2.11\"}, {\"status\": \"affected\", \"version\": \"7.2.3\"}, {\"status\": \"affected\", \"version\": \"7.1.5\"}, {\"status\": \"affected\", \"version\": \"6.3.3\"}, {\"status\": \"affected\", \"version\": \"7.3.9\"}, {\"status\": \"affected\", \"version\": \"6.2.3\"}, {\"status\": \"affected\", \"version\": \"6.1.9\"}, {\"status\": \"affected\", \"version\": \"6.0.9\"}, {\"status\": \"affected\", \"version\": \"7.2.5\"}, {\"status\": \"affected\", \"version\": \"6.0.7\"}, {\"status\": \"affected\", \"version\": \"6.3.7\"}, {\"status\": \"affected\", \"version\": \"1.12.3\"}, {\"status\": \"affected\", \"version\": \"1.8.0\"}, {\"status\": \"affected\", \"version\": \"1.11.1\"}, {\"status\": \"affected\", \"version\": \"1.12.4\"}, {\"status\": \"affected\", \"version\": \"1.10.0\"}, {\"status\": \"affected\", \"version\": \"1.12.0\"}, {\"status\": \"affected\", \"version\": \"1.8.1\"}, {\"status\": \"affected\", \"version\": \"1.10.1\"}, {\"status\": \"affected\", \"version\": \"1.12.1\"}, {\"status\": \"affected\", \"version\": \"1.12.6\"}, {\"status\": \"affected\", \"version\": \"1.14.0\"}, {\"status\": \"affected\", \"version\": \"1.10.2\"}, {\"status\": \"affected\", \"version\": \"1.12.7\"}, {\"status\": \"affected\", \"version\": \"1.12.2\"}, {\"status\": \"affected\", \"version\": \"1.6.0\"}, {\"status\": \"affected\", \"version\": \"1.9.0\"}, {\"status\": \"affected\", \"version\": \"1.11.0\"}, {\"status\": \"affected\", \"version\": \"1.7.0\"}, {\"status\": \"affected\", \"version\": \"1.13.0\"}, {\"status\": \"affected\", \"version\": \"1.8.4\"}, {\"status\": \"affected\", \"version\": \"1.13.1\"}, {\"status\": \"affected\", \"version\": \"1.9.1\"}, {\"status\": \"affected\", \"version\": \"1.12.5\"}, {\"status\": \"affected\", \"version\": \"1.13.2\"}, {\"status\": \"affected\", \"version\": \"2.0.2\"}, {\"status\": \"affected\", \"version\": \"1.1.0\"}, {\"status\": \"affected\", \"version\": \"2.0.0\"}, {\"status\": \"affected\", \"version\": \"2.0.1\"}, {\"status\": \"affected\", \"version\": \"8.1.7.21512\"}, {\"status\": \"affected\", \"version\": \"8.1.7\"}, {\"status\": \"affected\", \"version\": \"8.1.5\"}, {\"status\": \"affected\", \"version\": \"8.1.3.21242\"}, {\"status\": \"affected\", \"version\": \"8.1.3\"}, {\"status\": \"affected\", \"version\": \"8.1.5.21322\"}, {\"status\": \"affected\", \"version\": \"8.1.7.21417\"}, {\"status\": \"affected\", \"version\": \"2.1.0.14\"}, {\"status\": \"affected\", \"version\": \"2.2.0\"}, {\"status\": \"affected\", \"version\": \"2.3.0\"}, {\"status\": \"affected\", \"version\": \"2.4.0\"}, {\"status\": \"affected\", \"version\": \"2.5.0\"}, {\"status\": \"affected\", \"version\": \"2.6.0\"}, {\"status\": \"affected\", \"version\": \"2.7.0\"}, {\"status\": \"affected\", \"version\": \"2.8.0\"}, {\"status\": \"affected\", \"version\": \"2.9.0\"}, {\"status\": \"affected\", \"version\": \"2.10.0\"}, {\"status\": \"affected\", \"version\": \"2.10.1\"}, {\"status\": \"affected\", \"version\": \"2.11.0\"}, {\"status\": \"affected\", \"version\": \"1.14.1\"}, {\"status\": \"affected\", \"version\": \"1.15.1\"}, {\"status\": \"affected\", \"version\": \"1.15.2\"}, {\"status\": \"affected\", \"version\": \"1.15.3\"}, {\"status\": \"affected\", \"version\": \"1.15.4\"}, {\"status\": \"affected\", \"version\": \"1.15.5\"}, {\"status\": \"affected\", \"version\": \"1.15.6\"}, {\"status\": \"affected\", \"version\": \"1.16.0\"}, {\"status\": \"affected\", \"version\": \"1.16.1\"}, {\"status\": \"affected\", \"version\": \"1.16.2\"}, {\"status\": \"affected\", \"version\": \"1.16.3\"}, {\"status\": \"affected\", \"version\": \"1.18.0\"}, {\"status\": \"affected\", \"version\": \"1.18.1\"}, {\"status\": \"affected\", \"version\": \"1.20.0\"}, {\"status\": \"affected\", \"version\": \"1.21.0\"}, {\"status\": \"affected\", \"version\": \"1.21.1\"}, {\"status\": \"affected\", \"version\": \"1.21.2\"}, {\"status\": \"affected\", \"version\": \"1.21.3\"}, {\"status\": \"affected\", \"version\": \"1.22.0\"}, {\"status\": \"affected\", \"version\": \"1.22.1\"}, {\"status\": \"affected\", \"version\": \"1.22.2\"}, {\"status\": \"affected\", \"version\": \"1.22.3\"}, {\"status\": \"affected\", \"version\": \"1.22.4\"}, {\"status\": \"affected\", \"version\": \"1.24.0\"}, {\"status\": \"affected\", \"version\": \"1.24.1\"}, {\"status\": \"affected\", \"version\": \"1.24.2\"}, {\"status\": \"affected\", \"version\": \"1.24.3\"}, {\"status\": \"affected\", \"version\": \"1.24.4\"}, {\"status\": \"affected\", \"version\": \"1.26.0\"}, {\"status\": \"affected\", \"version\": \"1.24.5\"}, {\"status\": \"affected\", \"version\": \"1.26.1\"}, {\"status\": \"affected\", \"version\": \"1.27.0\"}, {\"status\": \"affected\", \"version\": \"1.15.0\"}, {\"status\": \"affected\", \"version\": \"1.17.0\"}, {\"status\": \"affected\", \"version\": \"1.17.1\"}, {\"status\": \"affected\", \"version\": \"1.17.2\"}, {\"status\": \"affected\", \"version\": \"1.19.0\"}, {\"status\": \"affected\", \"version\": \"1.20.1\"}, {\"status\": \"affected\", \"version\": \"1.20.2\"}, {\"status\": \"affected\", \"version\": \"1.20.3\"}, {\"status\": \"affected\", \"version\": \"1.20.4\"}, {\"status\": \"affected\", \"version\": \"1.20.5\"}, {\"status\": \"affected\", \"version\": \"1.20.6\"}, {\"status\": \"affected\", \"version\": \"1.23.0\"}, {\"status\": \"affected\", \"version\": \"1.23.1\"}, {\"status\": \"affected\", \"version\": \"1.20.7\"}, {\"status\": \"affected\", \"version\": \"1.20.8\"}, {\"status\": \"affected\", \"version\": \"1.25.0\"}, {\"status\": \"affected\", \"version\": \"1.25.1\"}, {\"status\": \"affected\", \"version\": \"1.25.2\"}, {\"status\": \"affected\", \"version\": \"1.27.1\"}, {\"status\": \"affected\", \"version\": \"1.27.2\"}, {\"status\": \"affected\", \"version\": \"7.3.13\"}, {\"status\": \"affected\", \"version\": \"7.3.15\"}, {\"status\": \"affected\", \"version\": \"7.4.1\"}, {\"status\": \"affected\", \"version\": \"7.4.1.20425\"}, {\"status\": \"affected\", \"version\": \"7.4.1.20439\"}, {\"status\": \"affected\", \"version\": \"7.4.3\"}, {\"status\": \"affected\", \"version\": \"7.4.3.20679\"}, {\"status\": \"affected\", \"version\": \"7.4.5\"}, {\"status\": \"affected\", \"version\": \"7.5.1.20813\"}, {\"status\": \"affected\", \"version\": \"7.5.1.20833\"}, {\"status\": \"affected\", \"version\": \"7.5.3\"}, {\"status\": \"affected\", \"version\": \"7.5.5\"}, {\"status\": \"affected\", \"version\": \"8.0.1.21160\"}, {\"status\": \"affected\", \"version\": \"8.0.1.21164\"}, {\"status\": \"affected\", \"version\": \"7.5.7\"}, {\"status\": \"affected\", \"version\": \"7.5.9\"}, {\"status\": \"affected\", \"version\": \"7.5.11\"}, {\"status\": \"affected\", \"version\": \"8.1.7.21585\"}, {\"status\": \"affected\", \"version\": \"7.5.13.21586\"}, {\"status\": \"affected\", \"version\": \"7.5.13.21598\"}, {\"status\": \"affected\", \"version\": \"8.2.1.21612\"}, {\"status\": \"affected\", \"version\": \"8.2.1.21650\"}, {\"status\": \"affected\", \"version\": \"7.5.15.21611\"}, {\"status\": \"affected\", \"version\": \"7.5.17.21680\"}, {\"status\": \"affected\", \"version\": \"8.2.3.30119\"}, {\"status\": \"affected\", \"version\": \"8.2.4.30130\"}, {\"status\": \"affected\", \"version\": \"8.4.0\"}, {\"status\": \"affected\", \"version\": \"7.5.19\"}, {\"status\": \"affected\", \"version\": \"8.4.1.30298\"}, {\"status\": \"affected\", \"version\": \"8.4.2.30317\"}, {\"status\": \"affected\", \"version\": \"8.4.1.30307\"}, {\"status\": \"affected\", \"version\": \"7.5.20\"}, {\"status\": \"affected\", \"version\": \"8.4.3\"}, {\"status\": \"affected\", \"version\": \"8.4.4.30419\"}, {\"status\": \"affected\", \"version\": \"8.4.4.30467\"}, {\"status\": \"affected\", \"version\": \"7.5.21.21732\"}, {\"status\": \"affected\", \"version\": \"8.4.5.30483\"}], \"defaultStatus\": \"unknown\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ\", \"name\": \"cisco-sa-clamav-css-Fn4QSZ\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\\r\\n\\r\\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-248\", \"description\": \"Uncaught Exception\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2026-03-04T17:44:55.869Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-20031\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-03-05T15:52:07.708Z\", \"dateReserved\": \"2025-10-08T11:59:15.353Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2026-03-04T17:17:33.372Z\", \"assignerShortName\": \"cisco\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2026-AVI-0241
Vulnerability from certfr_avis - Published: 2026-03-05 - Updated: 2026-03-05
Une vulnérabilité a été découverte dans ClamAV. Elle permet à un attaquant de provoquer un déni de service.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "ClamAV versions post\u00e9rieures \u00e0 1.1.0 et ant\u00e9rieures \u00e0 1.4.4 ou 1.5.2",
"product": {
"name": "ClamAV",
"vendor": {
"name": "ClamAV",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-20031",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20031"
}
],
"initial_release_date": "2026-03-05T00:00:00",
"last_revision_date": "2026-03-05T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0241",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-03-05T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans ClamAV. Elle permet \u00e0 un attaquant de provoquer un d\u00e9ni de service.",
"title": "Vuln\u00e9rabilit\u00e9 dans ClamAV",
"vendor_advisories": [
{
"published_at": "2026-03-04",
"title": "Bulletin de s\u00e9curit\u00e9 ClamAV clamav-152-and-144-security-patch",
"url": "https://blog.clamav.net/2026/03/clamav-152-and-144-security-patch.html"
}
]
}
SUSE-SU-2026:1325-1
Vulnerability from csaf_suse - Published: 2026-04-14 13:15 - Updated: 2026-04-14 13:15Summary
Security update for clamav
Severity
Moderate
Notes
Title of the patch: Security update for clamav
Description of the patch: This update for clamav fixes the following issues:
Update to clamav 1.5.2:
Security issue:
- CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of
service conditions via a crafted HTML file (bsc#1259207).
Non security issue:
- Support transactional updates (jsc#PED-14819).
Changelog:
* Fixed a possible infinite loop when scanning some JPEG files by
upgrading affected ClamAV dependency, a Rust image library.
* The CVD verification process will now ignore certificate files
in the CVD certs directory when the user lacks read permissions.
* Freshclam: Fix CLD verification bug with PrivateMirror option.
* Upgraded the Rust bytes dependency to a newer version to
resolve RUSTSEC-2026-0007 advisory.
* Fixed a possible crash caused by invalid pointer alignment on
some platforms.
* Minimal required Rust version is now 1.87.
Patchnames: SUSE-2026-1325,SUSE-SLE-Module-Basesystem-15-SP7-2026-1325,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1325,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1325,openSUSE-SLE-15.6-2026-1325
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for clamav",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for clamav fixes the following issues:\n\nUpdate to clamav 1.5.2:\n\nSecurity issue:\n\n- CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of\n service conditions via a crafted HTML file (bsc#1259207).\n\nNon security issue:\n\n- Support transactional updates (jsc#PED-14819).\n\nChangelog:\n\n * Fixed a possible infinite loop when scanning some JPEG files by\n upgrading affected ClamAV dependency, a Rust image library.\n * The CVD verification process will now ignore certificate files\n in the CVD certs directory when the user lacks read permissions.\n * Freshclam: Fix CLD verification bug with PrivateMirror option.\n * Upgraded the Rust bytes dependency to a newer version to\n resolve RUSTSEC-2026-0007 advisory.\n * Fixed a possible crash caused by invalid pointer alignment on\n some platforms.\n * Minimal required Rust version is now 1.87.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1325,SUSE-SLE-Module-Basesystem-15-SP7-2026-1325,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1325,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1325,openSUSE-SLE-15.6-2026-1325",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1325-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1325-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261325-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1325-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045522.html"
},
{
"category": "self",
"summary": "SUSE Bug 1221954",
"url": "https://bugzilla.suse.com/1221954"
},
{
"category": "self",
"summary": "SUSE Bug 1258072",
"url": "https://bugzilla.suse.com/1258072"
},
{
"category": "self",
"summary": "SUSE Bug 1259207",
"url": "https://bugzilla.suse.com/1259207"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20031 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20031/"
}
],
"title": "Security update for clamav",
"tracking": {
"current_release_date": "2026-04-14T13:15:45Z",
"generator": {
"date": "2026-04-14T13:15:45Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1325-1",
"initial_release_date": "2026-04-14T13:15:45Z",
"revision_history": [
{
"date": "2026-04-14T13:15:45Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-150600.18.25.1.aarch64",
"product": {
"name": "clamav-1.5.2-150600.18.25.1.aarch64",
"product_id": "clamav-1.5.2-150600.18.25.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-150600.18.25.1.aarch64",
"product": {
"name": "clamav-devel-1.5.2-150600.18.25.1.aarch64",
"product_id": "clamav-devel-1.5.2-150600.18.25.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-150600.18.25.1.aarch64",
"product": {
"name": "clamav-milter-1.5.2-150600.18.25.1.aarch64",
"product_id": "clamav-milter-1.5.2-150600.18.25.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-150600.18.25.1.aarch64",
"product": {
"name": "libclamav12-1.5.2-150600.18.25.1.aarch64",
"product_id": "libclamav12-1.5.2-150600.18.25.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-150600.18.25.1.aarch64",
"product": {
"name": "libclammspack0-1.5.2-150600.18.25.1.aarch64",
"product_id": "libclammspack0-1.5.2-150600.18.25.1.aarch64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"product": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"product_id": "libfreshclam4-1.5.2-150600.18.25.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"product": {
"name": "clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"product_id": "clamav-docs-html-1.5.2-150600.18.25.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-150600.18.25.1.ppc64le",
"product": {
"name": "clamav-1.5.2-150600.18.25.1.ppc64le",
"product_id": "clamav-1.5.2-150600.18.25.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"product": {
"name": "clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"product_id": "clamav-devel-1.5.2-150600.18.25.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"product": {
"name": "clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"product_id": "clamav-milter-1.5.2-150600.18.25.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-150600.18.25.1.ppc64le",
"product": {
"name": "libclamav12-1.5.2-150600.18.25.1.ppc64le",
"product_id": "libclamav12-1.5.2-150600.18.25.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"product": {
"name": "libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"product_id": "libclammspack0-1.5.2-150600.18.25.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"product": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"product_id": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-150600.18.25.1.s390x",
"product": {
"name": "clamav-1.5.2-150600.18.25.1.s390x",
"product_id": "clamav-1.5.2-150600.18.25.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-150600.18.25.1.s390x",
"product": {
"name": "clamav-devel-1.5.2-150600.18.25.1.s390x",
"product_id": "clamav-devel-1.5.2-150600.18.25.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-150600.18.25.1.s390x",
"product": {
"name": "clamav-milter-1.5.2-150600.18.25.1.s390x",
"product_id": "clamav-milter-1.5.2-150600.18.25.1.s390x"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-150600.18.25.1.s390x",
"product": {
"name": "libclamav12-1.5.2-150600.18.25.1.s390x",
"product_id": "libclamav12-1.5.2-150600.18.25.1.s390x"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-150600.18.25.1.s390x",
"product": {
"name": "libclammspack0-1.5.2-150600.18.25.1.s390x",
"product_id": "libclammspack0-1.5.2-150600.18.25.1.s390x"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-150600.18.25.1.s390x",
"product": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.s390x",
"product_id": "libfreshclam4-1.5.2-150600.18.25.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-150600.18.25.1.x86_64",
"product": {
"name": "clamav-1.5.2-150600.18.25.1.x86_64",
"product_id": "clamav-1.5.2-150600.18.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-150600.18.25.1.x86_64",
"product": {
"name": "clamav-devel-1.5.2-150600.18.25.1.x86_64",
"product_id": "clamav-devel-1.5.2-150600.18.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-150600.18.25.1.x86_64",
"product": {
"name": "clamav-milter-1.5.2-150600.18.25.1.x86_64",
"product_id": "clamav-milter-1.5.2-150600.18.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-150600.18.25.1.x86_64",
"product": {
"name": "libclamav12-1.5.2-150600.18.25.1.x86_64",
"product_id": "libclamav12-1.5.2-150600.18.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-150600.18.25.1.x86_64",
"product": {
"name": "libclammspack0-1.5.2-150600.18.25.1.x86_64",
"product_id": "libclammspack0-1.5.2-150600.18.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"product": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"product_id": "libfreshclam4-1.5.2-150600.18.25.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.2-150600.18.25.1.noarch as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-docs-html-1.5.2-150600.18.25.1.noarch"
},
"product_reference": "clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.2-150600.18.25.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-docs-html-1.5.2-150600.18.25.1.noarch"
},
"product_reference": "clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.2-150600.18.25.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-docs-html-1.5.2-150600.18.25.1.noarch"
},
"product_reference": "clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-150600.18.25.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "clamav-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-150600.18.25.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "clamav-devel-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.2-150600.18.25.1.noarch as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:clamav-docs-html-1.5.2-150600.18.25.1.noarch"
},
"product_reference": "clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-150600.18.25.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "clamav-milter-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-150600.18.25.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "libclamav12-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-150600.18.25.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "libclammspack0-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.aarch64"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.s390x"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-150600.18.25.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-20031",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20031"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20031",
"url": "https://www.suse.com/security/cve/CVE-2026-20031"
},
{
"category": "external",
"summary": "SUSE Bug 1259207 for CVE-2026-20031",
"url": "https://bugzilla.suse.com/1259207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
"openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.x86_64",
"openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
"openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
"openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.s390x",
"openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T13:15:45Z",
"details": "moderate"
}
],
"title": "CVE-2026-20031"
}
]
}
SUSE-SU-2026:1324-1
Vulnerability from csaf_suse - Published: 2026-04-14 13:15 - Updated: 2026-04-14 13:15Summary
Security update for clamav
Severity
Moderate
Notes
Title of the patch: Security update for clamav
Description of the patch: This update for clamav fixes the following issues:
Update to clamav 1.5.2:
- CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of
service conditions via a crafted HTML file (bsc#1259207).
Non security issue:
- Support transactional updates (jsc#PED-14819).
- Require main and library packages to be of the same version and release (bsc#1258072).
Changelog:
* Fixed a possible infinite loop when scanning some JPEG files by
upgrading affected ClamAV dependency, a Rust image library.
* The CVD verification process will now ignore certificate files
in the CVD certs directory when the user lacks read permissions.
* Freshclam: Fix CLD verification bug with PrivateMirror option.
* Upgraded the Rust bytes dependency to a newer version to
resolve RUSTSEC-2026-0007 advisory.
* Fixed a possible crash caused by invalid pointer alignment on
some platforms.
* Minimal required Rust version is now 1.87.
Patchnames: SUSE-2026-1324,SUSE-SLE-SERVER-12-SP5-LTSS-2026-1324,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-1324
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
| URL | Category | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for clamav",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for clamav fixes the following issues:\n\nUpdate to clamav 1.5.2:\n\n- CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of\n service conditions via a crafted HTML file (bsc#1259207).\n\nNon security issue:\n\n- Support transactional updates (jsc#PED-14819).\n- Require main and library packages to be of the same version and release (bsc#1258072).\n\nChangelog:\n\n * Fixed a possible infinite loop when scanning some JPEG files by\n upgrading affected ClamAV dependency, a Rust image library.\n * The CVD verification process will now ignore certificate files\n in the CVD certs directory when the user lacks read permissions.\n * Freshclam: Fix CLD verification bug with PrivateMirror option.\n * Upgraded the Rust bytes dependency to a newer version to\n resolve RUSTSEC-2026-0007 advisory.\n * Fixed a possible crash caused by invalid pointer alignment on\n some platforms.\n * Minimal required Rust version is now 1.87.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1324,SUSE-SLE-SERVER-12-SP5-LTSS-2026-1324,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-1324",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1324-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1324-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261324-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1324-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045523.html"
},
{
"category": "self",
"summary": "SUSE Bug 1221954",
"url": "https://bugzilla.suse.com/1221954"
},
{
"category": "self",
"summary": "SUSE Bug 1258072",
"url": "https://bugzilla.suse.com/1258072"
},
{
"category": "self",
"summary": "SUSE Bug 1259207",
"url": "https://bugzilla.suse.com/1259207"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20031 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20031/"
}
],
"title": "Security update for clamav",
"tracking": {
"current_release_date": "2026-04-14T13:15:31Z",
"generator": {
"date": "2026-04-14T13:15:31Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1324-1",
"initial_release_date": "2026-04-14T13:15:31Z",
"revision_history": [
{
"date": "2026-04-14T13:15:31Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-3.53.1.aarch64",
"product": {
"name": "clamav-1.5.2-3.53.1.aarch64",
"product_id": "clamav-1.5.2-3.53.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-3.53.1.aarch64",
"product": {
"name": "clamav-devel-1.5.2-3.53.1.aarch64",
"product_id": "clamav-devel-1.5.2-3.53.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-3.53.1.aarch64",
"product": {
"name": "clamav-milter-1.5.2-3.53.1.aarch64",
"product_id": "clamav-milter-1.5.2-3.53.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-3.53.1.aarch64",
"product": {
"name": "libclamav12-1.5.2-3.53.1.aarch64",
"product_id": "libclamav12-1.5.2-3.53.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-3.53.1.aarch64",
"product": {
"name": "libclammspack0-1.5.2-3.53.1.aarch64",
"product_id": "libclammspack0-1.5.2-3.53.1.aarch64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-3.53.1.aarch64",
"product": {
"name": "libfreshclam4-1.5.2-3.53.1.aarch64",
"product_id": "libfreshclam4-1.5.2-3.53.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-docs-html-1.5.2-3.53.1.noarch",
"product": {
"name": "clamav-docs-html-1.5.2-3.53.1.noarch",
"product_id": "clamav-docs-html-1.5.2-3.53.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-3.53.1.ppc64le",
"product": {
"name": "clamav-1.5.2-3.53.1.ppc64le",
"product_id": "clamav-1.5.2-3.53.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-3.53.1.ppc64le",
"product": {
"name": "clamav-devel-1.5.2-3.53.1.ppc64le",
"product_id": "clamav-devel-1.5.2-3.53.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-3.53.1.ppc64le",
"product": {
"name": "clamav-milter-1.5.2-3.53.1.ppc64le",
"product_id": "clamav-milter-1.5.2-3.53.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-3.53.1.ppc64le",
"product": {
"name": "libclamav12-1.5.2-3.53.1.ppc64le",
"product_id": "libclamav12-1.5.2-3.53.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-3.53.1.ppc64le",
"product": {
"name": "libclammspack0-1.5.2-3.53.1.ppc64le",
"product_id": "libclammspack0-1.5.2-3.53.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-3.53.1.ppc64le",
"product": {
"name": "libfreshclam4-1.5.2-3.53.1.ppc64le",
"product_id": "libfreshclam4-1.5.2-3.53.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-3.53.1.s390x",
"product": {
"name": "clamav-1.5.2-3.53.1.s390x",
"product_id": "clamav-1.5.2-3.53.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-3.53.1.s390x",
"product": {
"name": "clamav-devel-1.5.2-3.53.1.s390x",
"product_id": "clamav-devel-1.5.2-3.53.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-3.53.1.s390x",
"product": {
"name": "clamav-milter-1.5.2-3.53.1.s390x",
"product_id": "clamav-milter-1.5.2-3.53.1.s390x"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-3.53.1.s390x",
"product": {
"name": "libclamav12-1.5.2-3.53.1.s390x",
"product_id": "libclamav12-1.5.2-3.53.1.s390x"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-3.53.1.s390x",
"product": {
"name": "libclammspack0-1.5.2-3.53.1.s390x",
"product_id": "libclammspack0-1.5.2-3.53.1.s390x"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-3.53.1.s390x",
"product": {
"name": "libfreshclam4-1.5.2-3.53.1.s390x",
"product_id": "libfreshclam4-1.5.2-3.53.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-3.53.1.x86_64",
"product": {
"name": "clamav-1.5.2-3.53.1.x86_64",
"product_id": "clamav-1.5.2-3.53.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-3.53.1.x86_64",
"product": {
"name": "clamav-devel-1.5.2-3.53.1.x86_64",
"product_id": "clamav-devel-1.5.2-3.53.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-3.53.1.x86_64",
"product": {
"name": "clamav-milter-1.5.2-3.53.1.x86_64",
"product_id": "clamav-milter-1.5.2-3.53.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-3.53.1.x86_64",
"product": {
"name": "libclamav12-1.5.2-3.53.1.x86_64",
"product_id": "libclamav12-1.5.2-3.53.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-3.53.1.x86_64",
"product": {
"name": "libclammspack0-1.5.2-3.53.1.x86_64",
"product_id": "libclammspack0-1.5.2-3.53.1.x86_64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-3.53.1.x86_64",
"product": {
"name": "libfreshclam4-1.5.2-3.53.1.x86_64",
"product_id": "libfreshclam4-1.5.2-3.53.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-3.53.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.aarch64"
},
"product_reference": "clamav-1.5.2-3.53.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-3.53.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.ppc64le"
},
"product_reference": "clamav-1.5.2-3.53.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-3.53.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.s390x"
},
"product_reference": "clamav-1.5.2-3.53.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.x86_64"
},
"product_reference": "clamav-1.5.2-3.53.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-3.53.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.aarch64"
},
"product_reference": "clamav-devel-1.5.2-3.53.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-3.53.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.ppc64le"
},
"product_reference": "clamav-devel-1.5.2-3.53.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-3.53.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.s390x"
},
"product_reference": "clamav-devel-1.5.2-3.53.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.x86_64"
},
"product_reference": "clamav-devel-1.5.2-3.53.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.2-3.53.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.2-3.53.1.noarch"
},
"product_reference": "clamav-docs-html-1.5.2-3.53.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-3.53.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.aarch64"
},
"product_reference": "clamav-milter-1.5.2-3.53.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-3.53.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.ppc64le"
},
"product_reference": "clamav-milter-1.5.2-3.53.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-3.53.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.s390x"
},
"product_reference": "clamav-milter-1.5.2-3.53.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.x86_64"
},
"product_reference": "clamav-milter-1.5.2-3.53.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-3.53.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.aarch64"
},
"product_reference": "libclamav12-1.5.2-3.53.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-3.53.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.ppc64le"
},
"product_reference": "libclamav12-1.5.2-3.53.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-3.53.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.s390x"
},
"product_reference": "libclamav12-1.5.2-3.53.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.x86_64"
},
"product_reference": "libclamav12-1.5.2-3.53.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-3.53.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.aarch64"
},
"product_reference": "libclammspack0-1.5.2-3.53.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-3.53.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.ppc64le"
},
"product_reference": "libclammspack0-1.5.2-3.53.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-3.53.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.s390x"
},
"product_reference": "libclammspack0-1.5.2-3.53.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.x86_64"
},
"product_reference": "libclammspack0-1.5.2-3.53.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-3.53.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.aarch64"
},
"product_reference": "libfreshclam4-1.5.2-3.53.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-3.53.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.ppc64le"
},
"product_reference": "libfreshclam4-1.5.2-3.53.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-3.53.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.s390x"
},
"product_reference": "libfreshclam4-1.5.2-3.53.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.2-3.53.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.2-3.53.1.x86_64"
},
"product_reference": "clamav-1.5.2-3.53.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.2-3.53.1.x86_64"
},
"product_reference": "clamav-devel-1.5.2-3.53.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.2-3.53.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.2-3.53.1.noarch"
},
"product_reference": "clamav-docs-html-1.5.2-3.53.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.2-3.53.1.x86_64"
},
"product_reference": "clamav-milter-1.5.2-3.53.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.2-3.53.1.x86_64"
},
"product_reference": "libclamav12-1.5.2-3.53.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.2-3.53.1.x86_64"
},
"product_reference": "libclammspack0-1.5.2-3.53.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.2-3.53.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.2-3.53.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-20031",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20031"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.2-3.53.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.2-3.53.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.2-3.53.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20031",
"url": "https://www.suse.com/security/cve/CVE-2026-20031"
},
{
"category": "external",
"summary": "SUSE Bug 1259207 for CVE-2026-20031",
"url": "https://bugzilla.suse.com/1259207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.2-3.53.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.2-3.53.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.2-3.53.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.2-3.53.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.2-3.53.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.2-3.53.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.2-3.53.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T13:15:31Z",
"details": "moderate"
}
],
"title": "CVE-2026-20031"
}
]
}
SUSE-SU-2026:21358-1
Vulnerability from csaf_suse - Published: 2026-04-20 15:16 - Updated: 2026-04-20 15:16Summary
Security update for clamav
Severity
Moderate
Notes
Title of the patch: Security update for clamav
Description of the patch: This update for clamav fixes the following issues:
Update to clamav 1.5.2:
Security issue:
- CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of
service conditions via a crafted HTML file (bsc#1259207).
Non security issue:
- Support transactional updates (jsc#PED-14819).
Changelog:
* Fixed a possible infinite loop when scanning some JPEG files by
upgrading affected ClamAV dependency, a Rust image library.
* The CVD verification process will now ignore certificate files
in the CVD certs directory when the user lacks read permissions.
* Freshclam: Fix CLD verification bug with PrivateMirror option.
* Upgraded the Rust bytes dependency to a newer version to
resolve RUSTSEC-2026-0007 advisory.
* Fixed a possible crash caused by invalid pointer alignment on
some platforms.
Patchnames: SUSE-SLES-16.0-487
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
| URL | Category | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for clamav",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for clamav fixes the following issues:\n\nUpdate to clamav 1.5.2:\n\nSecurity issue:\n\n- CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of\n service conditions via a crafted HTML file (bsc#1259207).\n\nNon security issue:\n\n- Support transactional updates (jsc#PED-14819).\n\nChangelog:\n\n * Fixed a possible infinite loop when scanning some JPEG files by\n upgrading affected ClamAV dependency, a Rust image library.\n * The CVD verification process will now ignore certificate files\n in the CVD certs directory when the user lacks read permissions.\n * Freshclam: Fix CLD verification bug with PrivateMirror option.\n * Upgraded the Rust bytes dependency to a newer version to\n resolve RUSTSEC-2026-0007 advisory.\n * Fixed a possible crash caused by invalid pointer alignment on\n some platforms.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLES-16.0-487",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21358-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:21358-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202621358-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:21358-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/046083.html"
},
{
"category": "self",
"summary": "SUSE Bug 1221954",
"url": "https://bugzilla.suse.com/1221954"
},
{
"category": "self",
"summary": "SUSE Bug 1258072",
"url": "https://bugzilla.suse.com/1258072"
},
{
"category": "self",
"summary": "SUSE Bug 1259207",
"url": "https://bugzilla.suse.com/1259207"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20031 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20031/"
}
],
"title": "Security update for clamav",
"tracking": {
"current_release_date": "2026-04-20T15:16:17Z",
"generator": {
"date": "2026-04-20T15:16:17Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:21358-1",
"initial_release_date": "2026-04-20T15:16:17Z",
"revision_history": [
{
"date": "2026-04-20T15:16:17Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-160000.1.1.aarch64",
"product": {
"name": "clamav-1.5.2-160000.1.1.aarch64",
"product_id": "clamav-1.5.2-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-160000.1.1.aarch64",
"product": {
"name": "clamav-devel-1.5.2-160000.1.1.aarch64",
"product_id": "clamav-devel-1.5.2-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-160000.1.1.aarch64",
"product": {
"name": "clamav-milter-1.5.2-160000.1.1.aarch64",
"product_id": "clamav-milter-1.5.2-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-160000.1.1.aarch64",
"product": {
"name": "libclamav12-1.5.2-160000.1.1.aarch64",
"product_id": "libclamav12-1.5.2-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-160000.1.1.aarch64",
"product": {
"name": "libclammspack0-1.5.2-160000.1.1.aarch64",
"product_id": "libclammspack0-1.5.2-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-160000.1.1.aarch64",
"product": {
"name": "libfreshclam4-1.5.2-160000.1.1.aarch64",
"product_id": "libfreshclam4-1.5.2-160000.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-docs-html-1.5.2-160000.1.1.noarch",
"product": {
"name": "clamav-docs-html-1.5.2-160000.1.1.noarch",
"product_id": "clamav-docs-html-1.5.2-160000.1.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-160000.1.1.ppc64le",
"product": {
"name": "clamav-1.5.2-160000.1.1.ppc64le",
"product_id": "clamav-1.5.2-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-160000.1.1.ppc64le",
"product": {
"name": "clamav-devel-1.5.2-160000.1.1.ppc64le",
"product_id": "clamav-devel-1.5.2-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-160000.1.1.ppc64le",
"product": {
"name": "clamav-milter-1.5.2-160000.1.1.ppc64le",
"product_id": "clamav-milter-1.5.2-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-160000.1.1.ppc64le",
"product": {
"name": "libclamav12-1.5.2-160000.1.1.ppc64le",
"product_id": "libclamav12-1.5.2-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-160000.1.1.ppc64le",
"product": {
"name": "libclammspack0-1.5.2-160000.1.1.ppc64le",
"product_id": "libclammspack0-1.5.2-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-160000.1.1.ppc64le",
"product": {
"name": "libfreshclam4-1.5.2-160000.1.1.ppc64le",
"product_id": "libfreshclam4-1.5.2-160000.1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-160000.1.1.s390x",
"product": {
"name": "clamav-1.5.2-160000.1.1.s390x",
"product_id": "clamav-1.5.2-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-160000.1.1.s390x",
"product": {
"name": "clamav-devel-1.5.2-160000.1.1.s390x",
"product_id": "clamav-devel-1.5.2-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-160000.1.1.s390x",
"product": {
"name": "clamav-milter-1.5.2-160000.1.1.s390x",
"product_id": "clamav-milter-1.5.2-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-160000.1.1.s390x",
"product": {
"name": "libclamav12-1.5.2-160000.1.1.s390x",
"product_id": "libclamav12-1.5.2-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-160000.1.1.s390x",
"product": {
"name": "libclammspack0-1.5.2-160000.1.1.s390x",
"product_id": "libclammspack0-1.5.2-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-160000.1.1.s390x",
"product": {
"name": "libfreshclam4-1.5.2-160000.1.1.s390x",
"product_id": "libfreshclam4-1.5.2-160000.1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-160000.1.1.x86_64",
"product": {
"name": "clamav-1.5.2-160000.1.1.x86_64",
"product_id": "clamav-1.5.2-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-160000.1.1.x86_64",
"product": {
"name": "clamav-devel-1.5.2-160000.1.1.x86_64",
"product_id": "clamav-devel-1.5.2-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-160000.1.1.x86_64",
"product": {
"name": "clamav-milter-1.5.2-160000.1.1.x86_64",
"product_id": "clamav-milter-1.5.2-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-160000.1.1.x86_64",
"product": {
"name": "libclamav12-1.5.2-160000.1.1.x86_64",
"product_id": "libclamav12-1.5.2-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-160000.1.1.x86_64",
"product": {
"name": "libclammspack0-1.5.2-160000.1.1.x86_64",
"product_id": "libclammspack0-1.5.2-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-160000.1.1.x86_64",
"product": {
"name": "libfreshclam4-1.5.2-160000.1.1.x86_64",
"product_id": "libfreshclam4-1.5.2-160000.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 16.0",
"product": {
"name": "SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product": {
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.aarch64"
},
"product_reference": "clamav-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "clamav-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.s390x"
},
"product_reference": "clamav-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.x86_64"
},
"product_reference": "clamav-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.aarch64"
},
"product_reference": "clamav-devel-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "clamav-devel-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.s390x"
},
"product_reference": "clamav-devel-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.x86_64"
},
"product_reference": "clamav-devel-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.2-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch"
},
"product_reference": "clamav-docs-html-1.5.2-160000.1.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.aarch64"
},
"product_reference": "clamav-milter-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "clamav-milter-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.s390x"
},
"product_reference": "clamav-milter-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.x86_64"
},
"product_reference": "clamav-milter-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.aarch64"
},
"product_reference": "libclamav12-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "libclamav12-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.s390x"
},
"product_reference": "libclamav12-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.x86_64"
},
"product_reference": "libclamav12-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.aarch64"
},
"product_reference": "libclammspack0-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "libclammspack0-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.s390x"
},
"product_reference": "libclammspack0-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.x86_64"
},
"product_reference": "libclammspack0-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64"
},
"product_reference": "libfreshclam4-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "libfreshclam4-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.s390x"
},
"product_reference": "libfreshclam4-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.aarch64"
},
"product_reference": "clamav-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "clamav-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.s390x"
},
"product_reference": "clamav-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.x86_64"
},
"product_reference": "clamav-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.aarch64"
},
"product_reference": "clamav-devel-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "clamav-devel-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.s390x"
},
"product_reference": "clamav-devel-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.x86_64"
},
"product_reference": "clamav-devel-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.2-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch"
},
"product_reference": "clamav-docs-html-1.5.2-160000.1.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.aarch64"
},
"product_reference": "clamav-milter-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "clamav-milter-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.s390x"
},
"product_reference": "clamav-milter-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.x86_64"
},
"product_reference": "clamav-milter-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.aarch64"
},
"product_reference": "libclamav12-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "libclamav12-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.s390x"
},
"product_reference": "libclamav12-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.x86_64"
},
"product_reference": "libclamav12-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.aarch64"
},
"product_reference": "libclammspack0-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "libclammspack0-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.s390x"
},
"product_reference": "libclammspack0-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.x86_64"
},
"product_reference": "libclammspack0-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64"
},
"product_reference": "libfreshclam4-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "libfreshclam4-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.s390x"
},
"product_reference": "libfreshclam4-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-20031",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20031"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20031",
"url": "https://www.suse.com/security/cve/CVE-2026-20031"
},
{
"category": "external",
"summary": "SUSE Bug 1259207 for CVE-2026-20031",
"url": "https://bugzilla.suse.com/1259207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-20T15:16:17Z",
"details": "moderate"
}
],
"title": "CVE-2026-20031"
}
]
}
NCSC-2026-0077
Vulnerability from csaf_ncscnl - Published: 2026-03-05 09:05 - Updated: 2026-03-05 09:05Summary
Kwetsbaarheden verholpen in Cisco Secure Firewall systemen
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Secure Firewall (inclusief ASA en FTD software).
Interpretaties: De kwetsbaarheden omvatten SQL-injectie, privilege-escalatie, denial-of-service, cross-site scripting, en onjuist beheer van invoer in verschillende componenten van de Cisco Secure Firewall. Authenticated remote attackers kunnen deze kwetsbaarheden misbruiken om ongeautoriseerde toegang te krijgen, systeemintegriteit te compromitteren, of netwerkdiensten te verstoren. De kwetsbaarheden zijn aanwezig in de webinterfaces, REST API's, en andere functionaliteiten van de firewall software.
Oplossingen: Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-20: Improper Input Validation
CWE-27: Path Traversal: 'dir/../../filename'
CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-131: Incorrect Calculation of Buffer Size
CWE-138: Improper Neutralization of Special Elements
CWE-190: Integer Overflow or Wraparound
CWE-244: Improper Clearing of Heap Memory Before Release ('Heap Inspection')
CWE-248: Uncaught Exception
CWE-250: Execution with Unnecessary Privileges
CWE-269: Improper Privilege Management
CWE-279: Incorrect Execution-Assigned Permissions
CWE-284: Improper Access Control
CWE-330: Use of Insufficiently Random Values
CWE-388: CWE-388
CWE-401: Missing Release of Memory after Effective Lifetime
CWE-404: Improper Resource Shutdown or Release
CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CWE-476: NULL Pointer Dereference
CWE-770: Allocation of Resources Without Limits or Throttling
CWE-772: Missing Release of Resource after Effective Lifetime
CWE-787: Out-of-bounds Write
CWE-788: Access of Memory Location After End of Buffer
CWE-823: Use of Out-of-range Pointer Offset
Multiple vulnerabilities in Cisco products, including an SQL injection flaw in Cisco Secure Firewall Management Center, allow authenticated users or remote attackers to perform actions such as SQL injection, denial of service, privilege escalation, remote code execution, and information disclosure.
6.5 (Medium)
A vulnerability in Cisco ASA and Firepower Threat Defense restore functionality allows an authenticated local attacker with administrator privileges to execute arbitrary root-level commands by restoring a crafted backup file due to improper sanitization.
6.0 (Medium)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software, including in the SAML 2.0 SSO and Remote Access SSL VPN features, allow unauthenticated remote attackers to cause device reloads and denial of service via crafted messages.
8.6 (High)
A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an unauthenticated adjacent attacker to cause device reload and denial of service by sending crafted OSPF update packets, requiring the secret key if OSPF authentication is enabled.
6.8 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD software allows unauthenticated remote attackers to bypass access controls by exploiting improper error handling during memory exhaustion in cluster replication, enabling unauthorized network traffic.
5.8 (Medium)
A logic error in Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to bypass Snort rules and send unauthorized network traffic.
5.8 (Medium)
A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center and Threat Defense Software allows an authenticated remote attacker with admin privileges to write arbitrary root files on the operating system by exploiting insufficient directory path validation during file synchronization.
5.9 (Medium)
Multiple SQL injection vulnerabilities in Cisco Secure FMC Software and Cisco Secure Firewall Management Center's web interfaces and REST APIs allow authenticated remote attackers to access databases and certain OS files.
8.1 (High)
A memory leak vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to cause a denial-of-service condition, disrupting network availability and requiring manual device reload.
5.8 (Medium)
A vulnerability in Cisco Secure Firewall ASA Software's CLI allows an authenticated admin user in one context to copy files, including sensitive configurations, to or from another context due to improper SCP access controls requiring valid credentials and exact file paths.
7.2 (High)
A vulnerability in ClamAV's CSS module allows unauthenticated remote attackers to cause a denial of service by exploiting improper UTF-8 string error handling.
5.3 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD VPN web server allows unauthenticated remote attackers to cause denial of service by sending crafted HTTP requests, resulting in device reloads.
8.6 (High)
A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an unauthenticated adjacent attacker to cause device reloads and denial of service when OSPF canonicalization debug is enabled due to insufficient input validation of OSPF LSU packets.
6.1 (Medium)
A vulnerability in Cisco Secure Firewall Threat Defense Software's Do Not Decrypt exclusion feature allows an unauthenticated remote attacker to cause denial of service by sending crafted TLS 1.2 encrypted traffic, resulting in device reloads.
6.8 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services enables unauthenticated remote attackers to conduct browser-based cross-site scripting attacks by exploiting improper HTTP request validation.
4.3 (Medium)
A vulnerability in Cisco Secure Firewall ASA's SSH key-based authentication allows an unauthenticated remote attacker with a valid username and public key to log in and execute commands as that user without the private key, excluding root access.
5.3 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD Software's IKEv2 feature allows authenticated remote attackers with valid VPN credentials to cause denial-of-service by sending crafted packets that may exhaust memory and trigger device reloads.
7.7 (High)
Multiple vulnerabilities in Cisco FXOS, Secure Firewall ASA, and FTD Software CLI features allow authenticated local attackers with administrative credentials to execute arbitrary commands with root or elevated privileges or cause device reloads due to insufficient input validation.
6.0 (Medium)
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD software allows an authenticated, adjacent attacker to send crafted packets that exhaust device memory, causing a denial of service.
4.3 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD software's handling of GCM-encrypted IKEv2 IPsec traffic allows an authenticated attacker with VPN credentials to cause a denial of service by triggering an unexpected device reload due to insufficient memory allocation.
7.7 (High)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow authenticated remote attackers to exhaust device memory, causing denial of service or device reloads.
7.7 (High)
A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause device reload and denial of service via crafted OSPF LSU packets exploiting insufficient input validation.
6.8 (Medium)
A vulnerability in Cisco Secure Firewall ASA Software's handling of embryonic connection limits during TCP SYN flood attacks can cause legitimate TCP SYN packets to be dropped, resulting in denial of service.
8.6 (High)
A vulnerability in the TLS cryptography of the Snort 3 Detection Engine in Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to cause unexpected restarts and denial of service, with TLS 1.3 unaffected.
5.8 (Medium)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow unauthenticated remote attackers to exhaust device memory, causing denial of service and potentially making the web interface unresponsive.
8.6 (High)
A vulnerability in Cisco Secure Firewall ASA and FTD CLI commands allows an authenticated local attacker with Administrator credentials to execute arbitrary Lua code as root due to improper input sanitization.
6.0 (Medium)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.
6.0 (Medium)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD software's Remote Access SSL VPN, HTTP management, and MUS functionality allow unauthenticated remote attackers to exhaust device memory, causing denial of service and requiring manual reboot.
5.3 (Medium)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.
6.0 (Medium)
Multiple vulnerabilities in the Remote Access SSL VPN feature of Cisco Secure Firewall ASA and FTD, including a LUA interpreter flaw, allow authenticated remote attackers to cause device reloads and denial of service.
7.7 (High)
A vulnerability in Cisco Secure Firewall Management Center allows an authenticated local attacker with administrative credentials to execute arbitrary root commands by exploiting insufficient restrictions on remediation modules in lockdown mode.
6.0 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause heap corruption via crafted packets, resulting in device reloads and denial-of-service.
6.8 (Medium)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software allow authenticated local attackers with low privileges to cause device reloads or execute commands with elevated privileges, resulting in denial of service or privilege escalation.
6.5 (Medium)
A vulnerability in Cisco ASA and FTD software's OSPF protocol allows an unauthenticated adjacent attacker to cause memory corruption and denial of service by sending crafted OSPF packets.
6.1 (Medium)
Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and OS files.
4.9 (Medium)
A reflected cross-site scripting (XSS) vulnerability in the SAML 2.0 SSO feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to exploit insufficient input validation of HTTP parameters.
6.1 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD Software's IKEv2 feature allows unauthenticated remote attackers to cause denial-of-service by exhausting memory with crafted packets, potentially requiring manual device reload.
5.8 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services allows unauthenticated remote attackers to perform cross-site scripting (XSS) via improper input validation in HTTP requests, potentially enabling arbitrary code execution in users' browsers.
6.1 (Medium)
Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and certain OS files.
6.5 (Medium)
A logic error in memory management during Snort 3 SSL packet inspection in Cisco Secure Firewall Threat Defense Software can allow an unauthenticated remote attacker to cause the Snort 3 Detection Engine to restart, resulting in a denial of service.
5.8 (Medium)
References
| URL | Category | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Secure Firewall (inclusief ASA en FTD software).",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden omvatten SQL-injectie, privilege-escalatie, denial-of-service, cross-site scripting, en onjuist beheer van invoer in verschillende componenten van de Cisco Secure Firewall. Authenticated remote attackers kunnen deze kwetsbaarheden misbruiken om ongeautoriseerde toegang te krijgen, systeemintegriteit te compromitteren, of netwerkdiensten te verstoren. De kwetsbaarheden zijn aanwezig in de webinterfaces, REST API\u0027s, en andere functionaliteiten van de firewall software.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Path Traversal: \u0027dir/../../filename\u0027",
"title": "CWE-27"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
"title": "CWE-80"
},
{
"category": "general",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "general",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "general",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "general",
"text": "Incorrect Calculation of Buffer Size",
"title": "CWE-131"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements",
"title": "CWE-138"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)",
"title": "CWE-244"
},
{
"category": "general",
"text": "Uncaught Exception",
"title": "CWE-248"
},
{
"category": "general",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "general",
"text": "Improper Privilege Management",
"title": "CWE-269"
},
{
"category": "general",
"text": "Incorrect Execution-Assigned Permissions",
"title": "CWE-279"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "general",
"text": "CWE-388",
"title": "CWE-388"
},
{
"category": "general",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "general",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "Missing Release of Resource after Effective Lifetime",
"title": "CWE-772"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Access of Memory Location After End of Buffer",
"title": "CWE-788"
},
{
"category": "general",
"text": "Use of Out-of-range Pointer Offset",
"title": "CWE-823"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-keybypass-cr5xPUSf"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-aclbypass-dos-CVxVRSvQ"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-desync-n5AVzEQw"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-esp-dos-uv7yD8P5"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-luainject-VescqgmS"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-SpOFF2Re"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-xss-uwjc4HR"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dnd-dos-bpEcg7B7"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort-bypass-rLggKzVF"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3ssl-FBEKYXpH"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-rHfqnwRg"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdfmc-dir-trav-wERgjhWq"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2"
}
],
"title": "Kwetsbaarheden verholpen in Cisco Secure Firewall systemen",
"tracking": {
"current_release_date": "2026-03-05T09:05:21.646499Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0077",
"initial_release_date": "2026-03-05T09:05:21.646499Z",
"revision_history": [
{
"date": "2026-03-05T09:05:21.646499Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "Adaptive Security Appliance"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "Cisco 3000 Series Industrial Security Appliances (ISA)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-3"
}
}
],
"category": "product_name",
"name": "Cisco ASA 5500-X Series Firewalls"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-4"
}
}
],
"category": "product_name",
"name": "Cisco Adaptive Security Virtual Appliance (ASAv)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-5"
}
}
],
"category": "product_name",
"name": "Cisco Firepower 1000 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-6"
}
}
],
"category": "product_name",
"name": "Cisco Firepower 2100 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-7"
}
}
],
"category": "product_name",
"name": "Cisco Firepower 9000 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-8"
}
}
],
"category": "product_name",
"name": "Cisco Secure Endpoint"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-9"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall 3100 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-10"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall 4200 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-11"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-12"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Management Center"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-13"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Management Center (FMC)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-14"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Management Center (FMC) Appliances"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-15"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Threat Defense (FTD) Software"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-16"
}
}
],
"category": "product_name",
"name": "Firepower Management Center"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-17"
}
}
],
"category": "product_name",
"name": "Firepower Threat Defense"
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-20340",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco products, including an SQL injection flaw in Cisco Secure Firewall Management Center, allow authenticated users or remote attackers to perform actions such as SQL injection, denial of service, privilege escalation, remote code execution, and information disclosure.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-20340 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-20340.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2024-20340"
},
{
"cve": "CVE-2024-20358",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "A vulnerability in Cisco ASA and Firepower Threat Defense restore functionality allows an authenticated local attacker with administrator privileges to execute arbitrary root-level commands by restoring a crafted backup file due to improper sanitization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-20358 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-20358.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2024-20358"
},
{
"cve": "CVE-2026-20101",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"notes": [
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software, including in the SAML 2.0 SSO and Remote Access SSL VPN features, allow unauthenticated remote attackers to cause device reloads and denial of service via crafted messages.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20101 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20101.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20101"
},
{
"cve": "CVE-2026-20020",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an unauthenticated adjacent attacker to cause device reload and denial of service by sending crafted OSPF update packets, requiring the secret key if OSPF authentication is enabled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20020 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20020.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20020"
},
{
"cve": "CVE-2026-20073",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD software allows unauthenticated remote attackers to bypass access controls by exploiting improper error handling during memory exhaustion in cluster replication, enabling unauthorized network traffic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20073 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20073.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20073"
},
{
"cve": "CVE-2026-20007",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "description",
"text": "A logic error in Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to bypass Snort rules and send unauthorized network traffic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20007 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20007.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20007"
},
{
"cve": "CVE-2026-20018",
"cwe": {
"id": "CWE-27",
"name": "Path Traversal: \u0027dir/../../filename\u0027"
},
"notes": [
{
"category": "other",
"text": "Path Traversal: \u0027dir/../../filename\u0027",
"title": "CWE-27"
},
{
"category": "description",
"text": "A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center and Threat Defense Software allows an authenticated remote attacker with admin privileges to write arbitrary root files on the operating system by exploiting insufficient directory path validation during file synchronization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20018 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20018.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20018"
},
{
"cve": "CVE-2026-20002",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "description",
"text": "Multiple SQL injection vulnerabilities in Cisco Secure FMC Software and Cisco Secure Firewall Management Center\u0027s web interfaces and REST APIs allow authenticated remote attackers to access databases and certain OS files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20002 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20002.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20002"
},
{
"cve": "CVE-2026-20015",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "A memory leak vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to cause a denial-of-service condition, disrupting network availability and requiring manual device reload.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20015 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20015.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20015"
},
{
"cve": "CVE-2026-20062",
"cwe": {
"id": "CWE-279",
"name": "Incorrect Execution-Assigned Permissions"
},
"notes": [
{
"category": "other",
"text": "Incorrect Execution-Assigned Permissions",
"title": "CWE-279"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA Software\u0027s CLI allows an authenticated admin user in one context to copy files, including sensitive configurations, to or from another context due to improper SCP access controls requiring valid credentials and exact file paths.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20062 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20062.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20062"
},
{
"cve": "CVE-2026-20031",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"notes": [
{
"category": "other",
"text": "Uncaught Exception",
"title": "CWE-248"
},
{
"category": "description",
"text": "A vulnerability in ClamAV\u0027s CSS module allows unauthenticated remote attackers to cause a denial of service by exploiting improper UTF-8 string error handling.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20031 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20031.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20031"
},
{
"cve": "CVE-2026-20039",
"cwe": {
"id": "CWE-244",
"name": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)",
"title": "CWE-244"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD VPN web server allows unauthenticated remote attackers to cause denial of service by sending crafted HTTP requests, resulting in device reloads.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20039 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20039.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20039"
},
{
"cve": "CVE-2026-20022",
"cwe": {
"id": "CWE-823",
"name": "Use of Out-of-range Pointer Offset"
},
"notes": [
{
"category": "other",
"text": "Use of Out-of-range Pointer Offset",
"title": "CWE-823"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an unauthenticated adjacent attacker to cause device reloads and denial of service when OSPF canonicalization debug is enabled due to insufficient input validation of OSPF LSU packets.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20022 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20022.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20022"
},
{
"cve": "CVE-2026-20050",
"cwe": {
"id": "CWE-404",
"name": "Improper Resource Shutdown or Release"
},
"notes": [
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall Threat Defense Software\u0027s Do Not Decrypt exclusion feature allows an unauthenticated remote attacker to cause denial of service by sending crafted TLS 1.2 encrypted traffic, resulting in device reloads.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20050 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20050.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20050"
},
{
"cve": "CVE-2026-20069",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services enables unauthenticated remote attackers to conduct browser-based cross-site scripting attacks by exploiting improper HTTP request validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20069 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20069.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20069"
},
{
"cve": "CVE-2026-20009",
"cwe": {
"id": "CWE-138",
"name": "Improper Neutralization of Special Elements"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements",
"title": "CWE-138"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA\u0027s SSH key-based authentication allows an unauthenticated remote attacker with a valid username and public key to log in and execute commands as that user without the private key, excluding root access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20009 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20009.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20009"
},
{
"cve": "CVE-2026-20014",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s IKEv2 feature allows authenticated remote attackers with valid VPN credentials to cause denial-of-service by sending crafted packets that may exhaust memory and trigger device reloads.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20014 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20014.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20014"
},
{
"cve": "CVE-2026-20016",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"notes": [
{
"category": "other",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco FXOS, Secure Firewall ASA, and FTD Software CLI features allow authenticated local attackers with administrative credentials to execute arbitrary commands with root or elevated privileges or cause device reloads due to insufficient input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20016 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20016.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20016"
},
{
"cve": "CVE-2026-20021",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD software allows an authenticated, adjacent attacker to send crafted packets that exhaust device memory, causing a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20021 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20021.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20021"
},
{
"cve": "CVE-2026-20049",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"notes": [
{
"category": "other",
"text": "Incorrect Calculation of Buffer Size",
"title": "CWE-131"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD software\u0027s handling of GCM-encrypted IKEv2 IPsec traffic allows an authenticated attacker with VPN credentials to cause a denial of service by triggering an unexpected device reload due to insufficient memory allocation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20049 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20049.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20049"
},
{
"cve": "CVE-2026-20105",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow authenticated remote attackers to exhaust device memory, causing denial of service or device reloads.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20105 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20105.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20105"
},
{
"cve": "CVE-2026-20025",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause device reload and denial of service via crafted OSPF LSU packets exploiting insufficient input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20025 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20025.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20025"
},
{
"cve": "CVE-2026-20082",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Resource after Effective Lifetime",
"title": "CWE-772"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA Software\u0027s handling of embryonic connection limits during TCP SYN flood attacks can cause legitimate TCP SYN packets to be dropped, resulting in denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20082 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20082.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20082"
},
{
"cve": "CVE-2026-20006",
"cwe": {
"id": "CWE-388",
"name": "-"
},
"notes": [
{
"category": "other",
"text": "CWE-388",
"title": "CWE-388"
},
{
"category": "description",
"text": "A vulnerability in the TLS cryptography of the Snort 3 Detection Engine in Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to cause unexpected restarts and denial of service, with TLS 1.3 unaffected.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20006 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20006.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20006"
},
{
"cve": "CVE-2026-20103",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow unauthenticated remote attackers to exhaust device memory, causing denial of service and potentially making the web interface unresponsive.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20103 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20103.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20103"
},
{
"cve": "CVE-2026-20008",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD CLI commands allows an authenticated local attacker with Administrator credentials to execute arbitrary Lua code as root due to improper input sanitization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20008 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20008.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20008"
},
{
"cve": "CVE-2026-20063",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"notes": [
{
"category": "other",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20063 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20063.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20063"
},
{
"cve": "CVE-2026-20106",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD software\u0027s Remote Access SSL VPN, HTTP management, and MUS functionality allow unauthenticated remote attackers to exhaust device memory, causing denial of service and requiring manual reboot.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20106 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20106.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20106"
},
{
"cve": "CVE-2026-20017",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"notes": [
{
"category": "other",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20017 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20017.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20017"
},
{
"cve": "CVE-2026-20100",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple vulnerabilities in the Remote Access SSL VPN feature of Cisco Secure Firewall ASA and FTD, including a LUA interpreter flaw, allow authenticated remote attackers to cause device reloads and denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20100 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20100.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20100"
},
{
"cve": "CVE-2026-20044",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"notes": [
{
"category": "other",
"text": "Improper Privilege Management",
"title": "CWE-269"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall Management Center allows an authenticated local attacker with administrative credentials to execute arbitrary root commands by exploiting insufficient restrictions on remediation modules in lockdown mode.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20044 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20044.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20044"
},
{
"cve": "CVE-2026-20024",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause heap corruption via crafted packets, resulting in device reloads and denial-of-service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20024 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20024.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20024"
},
{
"cve": "CVE-2026-20064",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"notes": [
{
"category": "other",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software allow authenticated local attackers with low privileges to cause device reloads or execute commands with elevated privileges, resulting in denial of service or privilege escalation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20064 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20064.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20064"
},
{
"cve": "CVE-2026-20023",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "A vulnerability in Cisco ASA and FTD software\u0027s OSPF protocol allows an unauthenticated adjacent attacker to cause memory corruption and denial of service by sending crafted OSPF packets.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20023 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20023.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20023"
},
{
"cve": "CVE-2026-20003",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "description",
"text": "Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and OS files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20003 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20003.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20003"
},
{
"cve": "CVE-2026-20102",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "A reflected cross-site scripting (XSS) vulnerability in the SAML 2.0 SSO feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to exploit insufficient input validation of HTTP parameters.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20102 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20102.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20102"
},
{
"cve": "CVE-2026-20013",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s IKEv2 feature allows unauthenticated remote attackers to cause denial-of-service by exhausting memory with crafted packets, potentially requiring manual device reload.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20013 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20013.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20013"
},
{
"cve": "CVE-2026-20070",
"cwe": {
"id": "CWE-80",
"name": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
"title": "CWE-80"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services allows unauthenticated remote attackers to perform cross-site scripting (XSS) via improper input validation in HTTP requests, potentially enabling arbitrary code execution in users\u0027 browsers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20070 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20070.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20070"
},
{
"cve": "CVE-2026-20001",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "description",
"text": "Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and certain OS files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20001 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20001.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20001"
},
{
"cve": "CVE-2026-20052",
"cwe": {
"id": "CWE-788",
"name": "Access of Memory Location After End of Buffer"
},
"notes": [
{
"category": "other",
"text": "Access of Memory Location After End of Buffer",
"title": "CWE-788"
},
{
"category": "description",
"text": "A logic error in memory management during Snort 3 SSL packet inspection in Cisco Secure Firewall Threat Defense Software can allow an unauthenticated remote attacker to cause the Snort 3 Detection Engine to restart, resulting in a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20052 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20052.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20052"
}
]
}
WID-SEC-W-2026-0593
Vulnerability from csaf_certbund - Published: 2026-03-04 23:00 - Updated: 2026-03-04 23:00Summary
ClamAV: Schwachstelle ermöglicht Denial of Service
Severity
Mittel
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: ClamAV ist ein Open Source Virenscanner.
Angriff: Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ClamAV ausnutzen, um einen Denial of Service Angriff durchzuführen.
Betroffene Betriebssysteme: - Linux
- UNIX
- Windows
References
| URL | Category | |
|---|---|---|
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "ClamAV ist ein Open Source Virenscanner.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ClamAV ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-0593 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0593.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-0593 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0593"
},
{
"category": "external",
"summary": "ClamAV security patch vom 2026-03-04",
"url": "https://blog.clamav.net/2026/03/clamav-152-and-144-security-patch.html"
},
{
"category": "external",
"summary": "CVE Record vom 2026-03-04",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20031"
},
{
"category": "external",
"summary": "Cisco Security Advisory CISCO-SA-CLAMAV-CSS-FN4QSZ vom 2026-03-04",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ"
}
],
"source_lang": "en-US",
"title": "ClamAV: Schwachstelle erm\u00f6glicht Denial of Service",
"tracking": {
"current_release_date": "2026-03-04T23:00:00.000+00:00",
"generator": {
"date": "2026-03-05T10:17:12.950+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.5.0"
}
},
"id": "WID-SEC-W-2026-0593",
"initial_release_date": "2026-03-04T23:00:00.000+00:00",
"revision_history": [
{
"date": "2026-03-04T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cisco Secure Endpoint",
"product": {
"name": "Cisco Secure Endpoint",
"product_id": "T051416",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:secure_endpoint:-"
}
}
}
],
"category": "vendor",
"name": "Cisco"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c1.5.2",
"product": {
"name": "Open Source ClamAV \u003c1.5.2",
"product_id": "T051397"
}
},
{
"category": "product_version",
"name": "1.5.2",
"product": {
"name": "Open Source ClamAV 1.5.2",
"product_id": "T051397-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:clamav:clamav:1.5.2"
}
}
},
{
"category": "product_version_range",
"name": "\u003c1.4.4",
"product": {
"name": "Open Source ClamAV \u003c1.4.4",
"product_id": "T051398"
}
},
{
"category": "product_version",
"name": "1.4.4",
"product": {
"name": "Open Source ClamAV 1.4.4",
"product_id": "T051398-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:clamav:clamav:1.4.4"
}
}
}
],
"category": "product_name",
"name": "ClamAV"
}
],
"category": "vendor",
"name": "Open Source"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-20031",
"product_status": {
"known_affected": [
"T051416",
"T051397",
"T051398"
]
},
"release_date": "2026-03-04T23:00:00.000+00:00",
"title": "CVE-2026-20031"
}
]
}
OPENSUSE-SU-2026:20479-1
Vulnerability from csaf_opensuse - Published: 2026-04-20 14:56 - Updated: 2026-04-20 14:56Summary
Security update for clamav
Severity
Moderate
Notes
Title of the patch: Security update for clamav
Description of the patch: This update for clamav fixes the following issues:
Update to clamav 1.5.2:
Security issue:
- CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of
service conditions via a crafted HTML file (bsc#1259207).
Non security issue:
- Support transactional updates (jsc#PED-14819).
Changelog:
* Fixed a possible infinite loop when scanning some JPEG files by
upgrading affected ClamAV dependency, a Rust image library.
* The CVD verification process will now ignore certificate files
in the CVD certs directory when the user lacks read permissions.
* Freshclam: Fix CLD verification bug with PrivateMirror option.
* Upgraded the Rust bytes dependency to a newer version to
resolve RUSTSEC-2026-0007 advisory.
* Fixed a possible crash caused by invalid pointer alignment on
some platforms.
Patchnames: openSUSE-Leap-16.0-487
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
| URL | Category | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for clamav",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for clamav fixes the following issues:\n\nUpdate to clamav 1.5.2:\n\nSecurity issue:\n\n- CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of\n service conditions via a crafted HTML file (bsc#1259207).\n\nNon security issue:\n\n- Support transactional updates (jsc#PED-14819).\n\nChangelog:\n\n * Fixed a possible infinite loop when scanning some JPEG files by\n upgrading affected ClamAV dependency, a Rust image library.\n * The CVD verification process will now ignore certificate files\n in the CVD certs directory when the user lacks read permissions.\n * Freshclam: Fix CLD verification bug with PrivateMirror option.\n * Upgraded the Rust bytes dependency to a newer version to\n resolve RUSTSEC-2026-0007 advisory.\n * Fixed a possible crash caused by invalid pointer alignment on\n some platforms.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-487",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20479-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1221954",
"url": "https://bugzilla.suse.com/1221954"
},
{
"category": "self",
"summary": "SUSE Bug 1258072",
"url": "https://bugzilla.suse.com/1258072"
},
{
"category": "self",
"summary": "SUSE Bug 1259207",
"url": "https://bugzilla.suse.com/1259207"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20031 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20031/"
}
],
"title": "Security update for clamav",
"tracking": {
"current_release_date": "2026-04-20T14:56:29Z",
"generator": {
"date": "2026-04-20T14:56:29Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:20479-1",
"initial_release_date": "2026-04-20T14:56:29Z",
"revision_history": [
{
"date": "2026-04-20T14:56:29Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-160000.1.1.aarch64",
"product": {
"name": "clamav-1.5.2-160000.1.1.aarch64",
"product_id": "clamav-1.5.2-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-160000.1.1.aarch64",
"product": {
"name": "clamav-devel-1.5.2-160000.1.1.aarch64",
"product_id": "clamav-devel-1.5.2-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-160000.1.1.aarch64",
"product": {
"name": "clamav-milter-1.5.2-160000.1.1.aarch64",
"product_id": "clamav-milter-1.5.2-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-160000.1.1.aarch64",
"product": {
"name": "libclamav12-1.5.2-160000.1.1.aarch64",
"product_id": "libclamav12-1.5.2-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-160000.1.1.aarch64",
"product": {
"name": "libclammspack0-1.5.2-160000.1.1.aarch64",
"product_id": "libclammspack0-1.5.2-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-160000.1.1.aarch64",
"product": {
"name": "libfreshclam4-1.5.2-160000.1.1.aarch64",
"product_id": "libfreshclam4-1.5.2-160000.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-docs-html-1.5.2-160000.1.1.noarch",
"product": {
"name": "clamav-docs-html-1.5.2-160000.1.1.noarch",
"product_id": "clamav-docs-html-1.5.2-160000.1.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-160000.1.1.ppc64le",
"product": {
"name": "clamav-1.5.2-160000.1.1.ppc64le",
"product_id": "clamav-1.5.2-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-160000.1.1.ppc64le",
"product": {
"name": "clamav-devel-1.5.2-160000.1.1.ppc64le",
"product_id": "clamav-devel-1.5.2-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-160000.1.1.ppc64le",
"product": {
"name": "clamav-milter-1.5.2-160000.1.1.ppc64le",
"product_id": "clamav-milter-1.5.2-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-160000.1.1.ppc64le",
"product": {
"name": "libclamav12-1.5.2-160000.1.1.ppc64le",
"product_id": "libclamav12-1.5.2-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-160000.1.1.ppc64le",
"product": {
"name": "libclammspack0-1.5.2-160000.1.1.ppc64le",
"product_id": "libclammspack0-1.5.2-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-160000.1.1.ppc64le",
"product": {
"name": "libfreshclam4-1.5.2-160000.1.1.ppc64le",
"product_id": "libfreshclam4-1.5.2-160000.1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-160000.1.1.s390x",
"product": {
"name": "clamav-1.5.2-160000.1.1.s390x",
"product_id": "clamav-1.5.2-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-160000.1.1.s390x",
"product": {
"name": "clamav-devel-1.5.2-160000.1.1.s390x",
"product_id": "clamav-devel-1.5.2-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-160000.1.1.s390x",
"product": {
"name": "clamav-milter-1.5.2-160000.1.1.s390x",
"product_id": "clamav-milter-1.5.2-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-160000.1.1.s390x",
"product": {
"name": "libclamav12-1.5.2-160000.1.1.s390x",
"product_id": "libclamav12-1.5.2-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-160000.1.1.s390x",
"product": {
"name": "libclammspack0-1.5.2-160000.1.1.s390x",
"product_id": "libclammspack0-1.5.2-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-160000.1.1.s390x",
"product": {
"name": "libfreshclam4-1.5.2-160000.1.1.s390x",
"product_id": "libfreshclam4-1.5.2-160000.1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-160000.1.1.x86_64",
"product": {
"name": "clamav-1.5.2-160000.1.1.x86_64",
"product_id": "clamav-1.5.2-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-160000.1.1.x86_64",
"product": {
"name": "clamav-devel-1.5.2-160000.1.1.x86_64",
"product_id": "clamav-devel-1.5.2-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-160000.1.1.x86_64",
"product": {
"name": "clamav-milter-1.5.2-160000.1.1.x86_64",
"product_id": "clamav-milter-1.5.2-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-160000.1.1.x86_64",
"product": {
"name": "libclamav12-1.5.2-160000.1.1.x86_64",
"product_id": "libclamav12-1.5.2-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-160000.1.1.x86_64",
"product": {
"name": "libclammspack0-1.5.2-160000.1.1.x86_64",
"product_id": "libclammspack0-1.5.2-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-160000.1.1.x86_64",
"product": {
"name": "libfreshclam4-1.5.2-160000.1.1.x86_64",
"product_id": "libfreshclam4-1.5.2-160000.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.aarch64"
},
"product_reference": "clamav-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "clamav-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.s390x"
},
"product_reference": "clamav-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.x86_64"
},
"product_reference": "clamav-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.aarch64"
},
"product_reference": "clamav-devel-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "clamav-devel-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.s390x"
},
"product_reference": "clamav-devel-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.x86_64"
},
"product_reference": "clamav-devel-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.2-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch"
},
"product_reference": "clamav-docs-html-1.5.2-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.aarch64"
},
"product_reference": "clamav-milter-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "clamav-milter-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.s390x"
},
"product_reference": "clamav-milter-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.x86_64"
},
"product_reference": "clamav-milter-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.aarch64"
},
"product_reference": "libclamav12-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "libclamav12-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.s390x"
},
"product_reference": "libclamav12-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.x86_64"
},
"product_reference": "libclamav12-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.aarch64"
},
"product_reference": "libclammspack0-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "libclammspack0-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.s390x"
},
"product_reference": "libclammspack0-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.x86_64"
},
"product_reference": "libclammspack0-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64"
},
"product_reference": "libfreshclam4-1.5.2-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le"
},
"product_reference": "libfreshclam4-1.5.2-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.s390x"
},
"product_reference": "libfreshclam4-1.5.2-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.2-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-20031",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20031"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20031",
"url": "https://www.suse.com/security/cve/CVE-2026-20031"
},
{
"category": "external",
"summary": "SUSE Bug 1259207 for CVE-2026-20031",
"url": "https://bugzilla.suse.com/1259207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-20T14:56:29Z",
"details": "moderate"
}
],
"title": "CVE-2026-20031"
}
]
}
OPENSUSE-SU-2026:10325-1
Vulnerability from csaf_opensuse - Published: 2026-03-13 00:00 - Updated: 2026-03-13 00:00Summary
clamav-1.5.2-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: clamav-1.5.2-1.1 on GA media
Description of the patch: These are all security issues fixed in the clamav-1.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-10325
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "clamav-1.5.2-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the clamav-1.5.2-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-10325",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10325-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20031 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20031/"
}
],
"title": "clamav-1.5.2-1.1 on GA media",
"tracking": {
"current_release_date": "2026-03-13T00:00:00Z",
"generator": {
"date": "2026-03-13T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:10325-1",
"initial_release_date": "2026-03-13T00:00:00Z",
"revision_history": [
{
"date": "2026-03-13T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-1.1.aarch64",
"product": {
"name": "clamav-1.5.2-1.1.aarch64",
"product_id": "clamav-1.5.2-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-1.1.aarch64",
"product": {
"name": "clamav-devel-1.5.2-1.1.aarch64",
"product_id": "clamav-devel-1.5.2-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-docs-html-1.5.2-1.1.aarch64",
"product": {
"name": "clamav-docs-html-1.5.2-1.1.aarch64",
"product_id": "clamav-docs-html-1.5.2-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-1.1.aarch64",
"product": {
"name": "clamav-milter-1.5.2-1.1.aarch64",
"product_id": "clamav-milter-1.5.2-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-1.1.aarch64",
"product": {
"name": "libclamav12-1.5.2-1.1.aarch64",
"product_id": "libclamav12-1.5.2-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-1.1.aarch64",
"product": {
"name": "libclammspack0-1.5.2-1.1.aarch64",
"product_id": "libclammspack0-1.5.2-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-1.1.aarch64",
"product": {
"name": "libfreshclam4-1.5.2-1.1.aarch64",
"product_id": "libfreshclam4-1.5.2-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-1.1.ppc64le",
"product": {
"name": "clamav-1.5.2-1.1.ppc64le",
"product_id": "clamav-1.5.2-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-1.1.ppc64le",
"product": {
"name": "clamav-devel-1.5.2-1.1.ppc64le",
"product_id": "clamav-devel-1.5.2-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-docs-html-1.5.2-1.1.ppc64le",
"product": {
"name": "clamav-docs-html-1.5.2-1.1.ppc64le",
"product_id": "clamav-docs-html-1.5.2-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-1.1.ppc64le",
"product": {
"name": "clamav-milter-1.5.2-1.1.ppc64le",
"product_id": "clamav-milter-1.5.2-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-1.1.ppc64le",
"product": {
"name": "libclamav12-1.5.2-1.1.ppc64le",
"product_id": "libclamav12-1.5.2-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-1.1.ppc64le",
"product": {
"name": "libclammspack0-1.5.2-1.1.ppc64le",
"product_id": "libclammspack0-1.5.2-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-1.1.ppc64le",
"product": {
"name": "libfreshclam4-1.5.2-1.1.ppc64le",
"product_id": "libfreshclam4-1.5.2-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-1.1.s390x",
"product": {
"name": "clamav-1.5.2-1.1.s390x",
"product_id": "clamav-1.5.2-1.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-1.1.s390x",
"product": {
"name": "clamav-devel-1.5.2-1.1.s390x",
"product_id": "clamav-devel-1.5.2-1.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-docs-html-1.5.2-1.1.s390x",
"product": {
"name": "clamav-docs-html-1.5.2-1.1.s390x",
"product_id": "clamav-docs-html-1.5.2-1.1.s390x"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-1.1.s390x",
"product": {
"name": "clamav-milter-1.5.2-1.1.s390x",
"product_id": "clamav-milter-1.5.2-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-1.1.s390x",
"product": {
"name": "libclamav12-1.5.2-1.1.s390x",
"product_id": "libclamav12-1.5.2-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-1.1.s390x",
"product": {
"name": "libclammspack0-1.5.2-1.1.s390x",
"product_id": "libclammspack0-1.5.2-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-1.1.s390x",
"product": {
"name": "libfreshclam4-1.5.2-1.1.s390x",
"product_id": "libfreshclam4-1.5.2-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-1.5.2-1.1.x86_64",
"product": {
"name": "clamav-1.5.2-1.1.x86_64",
"product_id": "clamav-1.5.2-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-devel-1.5.2-1.1.x86_64",
"product": {
"name": "clamav-devel-1.5.2-1.1.x86_64",
"product_id": "clamav-devel-1.5.2-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-docs-html-1.5.2-1.1.x86_64",
"product": {
"name": "clamav-docs-html-1.5.2-1.1.x86_64",
"product_id": "clamav-docs-html-1.5.2-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "clamav-milter-1.5.2-1.1.x86_64",
"product": {
"name": "clamav-milter-1.5.2-1.1.x86_64",
"product_id": "clamav-milter-1.5.2-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclamav12-1.5.2-1.1.x86_64",
"product": {
"name": "libclamav12-1.5.2-1.1.x86_64",
"product_id": "libclamav12-1.5.2-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libclammspack0-1.5.2-1.1.x86_64",
"product": {
"name": "libclammspack0-1.5.2-1.1.x86_64",
"product_id": "libclammspack0-1.5.2-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libfreshclam4-1.5.2-1.1.x86_64",
"product": {
"name": "libfreshclam4-1.5.2-1.1.x86_64",
"product_id": "libfreshclam4-1.5.2-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-1.5.2-1.1.aarch64"
},
"product_reference": "clamav-1.5.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-1.5.2-1.1.ppc64le"
},
"product_reference": "clamav-1.5.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-1.5.2-1.1.s390x"
},
"product_reference": "clamav-1.5.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-1.5.2-1.1.x86_64"
},
"product_reference": "clamav-1.5.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.aarch64"
},
"product_reference": "clamav-devel-1.5.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.ppc64le"
},
"product_reference": "clamav-devel-1.5.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.s390x"
},
"product_reference": "clamav-devel-1.5.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.x86_64"
},
"product_reference": "clamav-devel-1.5.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.aarch64"
},
"product_reference": "clamav-docs-html-1.5.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.ppc64le"
},
"product_reference": "clamav-docs-html-1.5.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.s390x"
},
"product_reference": "clamav-docs-html-1.5.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.x86_64"
},
"product_reference": "clamav-docs-html-1.5.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.aarch64"
},
"product_reference": "clamav-milter-1.5.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.ppc64le"
},
"product_reference": "clamav-milter-1.5.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.s390x"
},
"product_reference": "clamav-milter-1.5.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.x86_64"
},
"product_reference": "clamav-milter-1.5.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.aarch64"
},
"product_reference": "libclamav12-1.5.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.ppc64le"
},
"product_reference": "libclamav12-1.5.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.s390x"
},
"product_reference": "libclamav12-1.5.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.x86_64"
},
"product_reference": "libclamav12-1.5.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.aarch64"
},
"product_reference": "libclammspack0-1.5.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.ppc64le"
},
"product_reference": "libclammspack0-1.5.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.s390x"
},
"product_reference": "libclammspack0-1.5.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.x86_64"
},
"product_reference": "libclammspack0-1.5.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.aarch64"
},
"product_reference": "libfreshclam4-1.5.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.ppc64le"
},
"product_reference": "libfreshclam4-1.5.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.s390x"
},
"product_reference": "libfreshclam4-1.5.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.x86_64"
},
"product_reference": "libfreshclam4-1.5.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-20031",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20031"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:clamav-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20031",
"url": "https://www.suse.com/security/cve/CVE-2026-20031"
},
{
"category": "external",
"summary": "SUSE Bug 1259207 for CVE-2026-20031",
"url": "https://bugzilla.suse.com/1259207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:clamav-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:clamav-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:clamav-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:clamav-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:libclamav12-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:libclamav12-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:libclamav12-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:libclamav12-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.x86_64",
"openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.aarch64",
"openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.ppc64le",
"openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.s390x",
"openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-13T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-20031"
}
]
}
FKIE_CVE-2026-20031
Vulnerability from fkie_nvd - Published: 2026-03-04 18:16 - Updated: 2026-03-05 19:39
Severity ?
Summary
A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process."
},
{
"lang": "es",
"value": "Una vulnerabilidad en el m\u00f3dulo HTML Cascading Style Sheets (CSS) de ClamAV podr\u00eda permitir a un atacante remoto no autenticado causar una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a un manejo de errores inadecuado al dividir cadenas UTF-8. Un atacante podr\u00eda explotar esta vulnerabilidad al enviar un archivo HTML manipulado para ser escaneado por ClamAV en un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante terminar el proceso de escaneo."
}
],
"id": "CVE-2026-20031",
"lastModified": "2026-03-05T19:39:11.967",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4,
"source": "psirt@cisco.com",
"type": "Primary"
}
]
},
"published": "2026-03-04T18:16:16.773",
"references": [
{
"source": "psirt@cisco.com",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-248"
}
],
"source": "psirt@cisco.com",
"type": "Primary"
}
]
}
GHSA-HVPM-HV6G-6M5C
Vulnerability from github – Published: 2026-03-04 18:31 – Updated: 2026-03-04 18:31
VLAI?
Details
A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.
Severity ?
5.3 (Medium)
{
"affected": [],
"aliases": [
"CVE-2026-20031"
],
"database_specific": {
"cwe_ids": [
"CWE-248"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-03-04T18:16:16Z",
"severity": "MODERATE"
},
"details": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\n\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.",
"id": "GHSA-hvpm-hv6g-6m5c",
"modified": "2026-03-04T18:31:54Z",
"published": "2026-03-04T18:31:54Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20031"
},
{
"type": "WEB",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…