CLSA-2026-1784110349

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784110349.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1784110349
Upstream
CVE (3)
Published
2026-07-15T10:12:44Z
Modified
2026-10-26T09:31:47Z
Summary
Fix CVE(s): CVE-2026-20213, CVE-2026-20214, CVE-2026-20244
Details
  • SECURITY UPDATE: Out-of-bounds write in the PE rebuilder via crafted Aspack files
    • debian/patches/CVE-2026-20213.patch: sum rebuilt section sizes in a 64-bit accumulator and reject allocations larger than CLI_MAX_ALLOCATION in libclamav/rebuildpe.c
    • CVE-2026-20213
  • SECURITY UPDATE: Out-of-bounds write in the FSG unpacker
    • debian/patches/CVE-2026-20214.patch: fix the FSG v1.31 section loop bound so a zero section count no longer underflows in libclamav/pe.c
    • CVE-2026-20214
  • SECURITY UPDATE: Integer overflow in the DMG mish stripe size checks
    • debian/patches/CVE-2026-20244.patch: compute the mish table size in a 64-bit domain and keep the DMG range checks in subtraction form in libclamav/dmg.c
    • CVE-2026-20244
References

Affected packages

TuxCare:Ubuntu:18.04
clamav

Package

Name
clamav
Purl
pkg:deb/tuxcare/clamav?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784110349.json"
clamav-base

Package

Name
clamav-base
Purl
pkg:deb/tuxcare/clamav-base?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784110349.json"
clamav-daemon

Package

Name
clamav-daemon
Purl
pkg:deb/tuxcare/clamav-daemon?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784110349.json"
clamav-doc

Package

Name
clamav-doc
Purl
pkg:deb/tuxcare/clamav-doc?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784110349.json"
clamav-docs

Package

Name
clamav-docs
Purl
pkg:deb/tuxcare/clamav-docs?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784110349.json"
clamav-freshclam

Package

Name
clamav-freshclam
Purl
pkg:deb/tuxcare/clamav-freshclam?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784110349.json"
clamav-milter

Package

Name
clamav-milter
Purl
pkg:deb/tuxcare/clamav-milter?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784110349.json"
clamav-testfiles

Package

Name
clamav-testfiles
Purl
pkg:deb/tuxcare/clamav-testfiles?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784110349.json"
clamdscan

Package

Name
clamdscan
Purl
pkg:deb/tuxcare/clamdscan?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784110349.json"
libclamav-dev

Package

Name
libclamav-dev
Purl
pkg:deb/tuxcare/libclamav-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784110349.json"
libclamav12

Package

Name
libclamav12
Purl
pkg:deb/tuxcare/libclamav12?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784110349.json"