Skip to content
Denial of Service Vulnerabilities in ClamAV Affect Fedora 43 and 44

Denial of Service Vulnerabilities in ClamAV Affect Fedora 43 and 44

First seen 12 Aug 2026, 02:41 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 13, 2026 at 01:03 UTC

Fedora has released patches addressing multiple Denial of Service vulnerabilities in ClamAV, affecting versions 1.4.5 and 1.4.6. The vulnerabilities include CVE-2026-20031, CVE-2026-20216, and CVE-2026-20215, which can be exploited via crafted files, leading to service disruptions. The issues were reported on August 10, 2026, and are linked to improper error handling in the software's CSS module and crafted InstallShield files. Users are advised to update their systems using the 'dnf' update program. The vulnerabilities primarily impact Linux systems running Fedora 43 and 44. Immediate action is recommended to mitigate potential service outages.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 55d ago How this analysis works

Timeline

2026-03-04
CVE-2026-20031 published
CVE-2026-20031 details improper error handling in ClamAV's CSS module, leading to potential DoS.
Linuxsecurity
2026-07-01
CVE-2026-20215 published
CVE-2026-20215 describes a DoS vulnerability via crafted 7z files in ClamAV.
Linuxsecurity
2026-07-01
CVE-2026-20216 published
CVE-2026-20216 outlines a DoS vulnerability via crafted InstallShield files in ClamAV.
Linuxsecurity
2026-08-10
Patches released for Fedora 43 and 44
Fedora released updates to address the identified DoS vulnerabilities in ClamAV.
Linuxsecurity

More articles in this cluster (3)

Following this threat?

Track Fedora and CVE-2026-20031 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 2