{"schemaVersion":3,"id":"USN-4146-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"clamav vulnerabilities\n\nIt was discovered that ClamAV incorrectly handled unpacking ZIP files. A\nremote attacker could possibly use this issue to cause ClamAV to crash,\nresulting in a denial of service. (CVE-2019-12625)\n\nIt was discovered that ClamAV incorrectly handled unpacking bzip2 files. A\nremote attacker could use this issue to cause ClamAV to crash, resulting in\na denial of service, or possibly execute arbitrary code. (CVE-2019-12900)","dates":{"published":"2019-10-02T11:39:35.000Z","modified":"2026-04-22T10:00:34.170Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"clamav","name":"clamav","label":"clamav","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/clamav","purlType":"deb","versions":[{"text":"< 0.101.4+dfsg-0ubuntu0.16.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0.101.4+dfsg-0ubuntu0.18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.101.4+dfsg-0ubuntu0.16.04.1 | < 0.101.4+dfsg-0ubuntu0.18.04.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-4146-1","label":"ubuntu.com/security/notices/USN-4146-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-12625","label":"ubuntu.com/security/CVE-2019-12625","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-12900","label":"ubuntu.com/security/CVE-2019-12900","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2019-12625","CVE-2019-12900"],"downstream":[],"duplicates":[],"related":["CVE-2019-12625","CVE-2019-12900"]},"timeline":[{"kind":"published","date":"2019-10-02T11:39:35.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T10:00:34.170Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T16:21:10.982Z","stale":false,"partial":false}}