Read the docs
TI-2008-03077 Aliases CVE-2008-3215GHSA-xfv3-wp5f-h673

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of…

Priority LOW 30CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

Why it matters now

EPSS 0.04708 91st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 19

CPEVersionsRoleVendor
cpe:2.3:a:clam_anti-virus:clamav:0.88.2:*:*:*:*:*:*:*0.88.2VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.88.4:*:*:*:*:*:*:*0.88.4VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.88.5:*:*:*:*:*:*:*0.88.5VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.88.6:*:*:*:*:*:*:*0.88.6VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.88.7:*:*:*:*:*:*:*0.88.7VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.88.7:p0:*:*:*:*:*:*0.88.7 p0VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.88.7:p1:*:*:*:*:*:*0.88.7 p1VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*0.90VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*0.90.1VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.90.1:p0:*:*:*:*:*:*0.90.1 p0VulnerableClam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.88.2:*:*:*:*:*:*:* Versions 0.88.2 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.88.4:*:*:*:*:*:*:* Versions 0.88.4 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.88.5:*:*:*:*:*:*:* Versions 0.88.5 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.88.6:*:*:*:*:*:*:* Versions 0.88.6 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.88.7:*:*:*:*:*:*:* Versions 0.88.7 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.88.7:p0:*:*:*:*:*:* Versions 0.88.7 p0 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.88.7:p1:*:*:*:*:*:* Versions 0.88.7 p1 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:* Versions 0.90 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:* Versions 0.90.1 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.90.1:p0:*:*:*:*:*:* Versions 0.90.1 p0 Vulnerable ·Clam Anti-virus
Show 9 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*0.90.2VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.90.2:p0:*:*:*:*:*:*0.90.2 p0VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.90.3:*:*:*:*:*:*:*0.90.3VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.90.3:p0:*:*:*:*:*:*0.90.3 p0VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.90.3:p1:*:*:*:*:*:*0.90.3 p1VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.91.2:p0:*:*:*:*:*:*0.91.2 p0VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.92:p0:*:*:*:*:*:*0.92 p0VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.92.1:*:*:*:*:*:*:*0.92.1VulnerableClam Anti-virus
cpe:2.3:a:clam_anti-virus:clamav:0.93:*:*:*:*:*:*:*0.93VulnerableClam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:* Versions 0.90.2 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.90.2:p0:*:*:*:*:*:* Versions 0.90.2 p0 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.90.3:*:*:*:*:*:*:* Versions 0.90.3 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.90.3:p0:*:*:*:*:*:* Versions 0.90.3 p0 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.90.3:p1:*:*:*:*:*:* Versions 0.90.3 p1 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.91.2:p0:*:*:*:*:*:* Versions 0.91.2 p0 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.92:p0:*:*:*:*:*:* Versions 0.92 p0 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.92.1:*:*:*:*:*:*:* Versions 0.92.1 Vulnerable ·Clam Anti-virus
  • cpe:2.3:a:clam_anti-virus:clamav:0.93:*:*:*:*:*:*:* Versions 0.93 Vulnerable ·Clam Anti-virus

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-3215
  2. 2026-10-03 Alias added: GHSA-xfv3-wp5f-h673

References

Exploit 1

Advisory 7

Other 5

  • TI-2007-04414 clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote… CVSS 2.0HIGH 7.6
  • TI-2008-01054 Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92… CVSS 2.0HIGH 10.0
  • TI-2008-00296 Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used… CVSS 2.0HIGH 10.0
  • TI-2006-04039 Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows… CVSS 2.0HIGH 7.5
  • TI-2008-04803 Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam… CVSS 2.0HIGH 9.3
  • TI-2007-06042 Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute… CVSS 2.0HIGH 7.5
See all 59 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences