CLSA-2026-1786831629

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1786831629.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1786831629
Upstream
CVE (6)
Published
2026-08-15T22:07:17Z
Modified
2026-10-26T09:31:40Z
Summary
clamav: Fix of 6 CVEs
Details
  • CVE-2026-20213: fix Aspack-triggered PE rebuild integer overflow leading to heap buffer overflow write
  • CVE-2026-20214: fix FSG unpacker section loop underflow leading to out-of-bounds write
  • CVE-2026-20215: fix 7z substream count overflow leading to heap under-allocation and out-of-bounds write
  • CVE-2026-20216: enforce InstallShield extraction limits to prevent temporary storage exhaustion
  • CVE-2026-20217: fix PESpin unpacker cleanup bitmap tracking leading to invalid free and crash
  • CVE-2026-20243: fix ALZ archive parser out-of-bounds write and scan-limit bypass
References

Affected packages

TuxCare:CentOS:6
clamav

Package

Name
clamav
Purl
pkg:rpm/tuxcare/clamav?distro=centos-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.4-1.el6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1786831629.json"
clamav-data

Package

Name
clamav-data
Purl
pkg:rpm/tuxcare/clamav-data?distro=centos-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.4-1.el6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1786831629.json"
clamav-devel

Package

Name
clamav-devel
Purl
pkg:rpm/tuxcare/clamav-devel?distro=centos-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.4-1.el6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1786831629.json"
clamav-doc

Package

Name
clamav-doc
Purl
pkg:rpm/tuxcare/clamav-doc?distro=centos-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.4-1.el6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1786831629.json"
clamav-filesystem

Package

Name
clamav-filesystem
Purl
pkg:rpm/tuxcare/clamav-filesystem?distro=centos-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.4-1.el6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1786831629.json"
clamav-freshclam

Package

Name
clamav-freshclam
Purl
pkg:rpm/tuxcare/clamav-freshclam?distro=centos-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.4-1.el6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1786831629.json"
clamav-lib

Package

Name
clamav-lib
Purl
pkg:rpm/tuxcare/clamav-lib?distro=centos-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.4-1.el6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1786831629.json"
clamav-milter

Package

Name
clamav-milter
Purl
pkg:rpm/tuxcare/clamav-milter?distro=centos-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.4-1.el6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1786831629.json"
clamd

Package

Name
clamd
Purl
pkg:rpm/tuxcare/clamd?distro=centos-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.4-1.el6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1786831629.json"