USN-8788-1: ClamAV vulnerabilities
ClamAV contains multiple denial-of-service vulnerabilities allowing remote crashes via crafted archive and document files.
Ubuntu Security Notice USN-8788-1 addresses multiple denial-of-service vulnerabilities in the ClamAV antivirus engine. The flaws (CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345) are triggered by improper handling of certain zip, PESpin, GPT, and PDF files, allowing remote attackers to crash the service. The vulnerabilities affect ClamAV versions prior to the patched release.
- Multiple denial-of-service vulnerabilities in ClamAV archive handling.
- Remote attackers can crash ClamAV by sending crafted zip, PESpin, GPT, or PDF files.
- Patches available in Ubuntu security update USN-8788-1.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-20337+1 related CVE | A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device | 7.5 | <1% | ||
| CVE-2026-20339 | A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded… | 7.5 | <1% | ||
| CVE-2026-20345 | A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded… | 7.5 | <1% |
From the original article
It was discovered that ClamAV incorrectly handled certain zip archive files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2026-20337, CVE-2026-20338) It was discovered that ClamAV incorrectly handled certain PESpin files.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.