CLSA-2026-1784210640

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784210640.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1784210640
Upstream
CVE (3)
Published
2026-07-16T14:04:28Z
Modified
2026-10-26T09:31:47Z
Summary
Fix CVE(s): CVE-2026-20215, CVE-2026-20216, CVE-2026-20217
Details
  • SECURITY UPDATE: Out-of-bounds write via 7z substream count overflow
    • debian/patches/CVE-2026-20215.patch: reject 7z archives whose total unpack-stream count would overflow UInt32 before it is accumulated in libclamav/7z/7zIn.c
    • CVE-2026-20215
  • SECURITY UPDATE: Denial of service via InstallShield extraction size-limit bypass
    • debian/patches/CVE-2026-20216.patch: enforce maxfilesize and maxscansize against the cumulative inflated output and propagate hard-stop limit errors out of is_extract_cab() in libclamav/ishield.c
    • CVE-2026-20216
  • SECURITY UPDATE: Invalid free in the PESpin unpacker cleanup loop
    • debian/patches/CVE-2026-20217.patch: shift the working bitmap instead of bitman in the PESpin cleanup loop so only unpacker-allocated sections are freed in libclamav/spin.c
    • CVE-2026-20217
References

Affected packages

TuxCare:Ubuntu:18.04
clamav

Package

Name
clamav
Purl
pkg:deb/tuxcare/clamav?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784210640.json"
clamav-base

Package

Name
clamav-base
Purl
pkg:deb/tuxcare/clamav-base?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784210640.json"
clamav-daemon

Package

Name
clamav-daemon
Purl
pkg:deb/tuxcare/clamav-daemon?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784210640.json"
clamav-doc

Package

Name
clamav-doc
Purl
pkg:deb/tuxcare/clamav-doc?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784210640.json"
clamav-docs

Package

Name
clamav-docs
Purl
pkg:deb/tuxcare/clamav-docs?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784210640.json"
clamav-freshclam

Package

Name
clamav-freshclam
Purl
pkg:deb/tuxcare/clamav-freshclam?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784210640.json"
clamav-milter

Package

Name
clamav-milter
Purl
pkg:deb/tuxcare/clamav-milter?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784210640.json"
clamav-testfiles

Package

Name
clamav-testfiles
Purl
pkg:deb/tuxcare/clamav-testfiles?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784210640.json"
clamdscan

Package

Name
clamdscan
Purl
pkg:deb/tuxcare/clamdscan?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784210640.json"
libclamav-dev

Package

Name
libclamav-dev
Purl
pkg:deb/tuxcare/libclamav-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784210640.json"
libclamav12

Package

Name
libclamav12
Purl
pkg:deb/tuxcare/libclamav12?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784210640.json"