Alpine: multiple clamav packages, multiple freshclam packages: security update to 1.4.5-r0

high Tenable Self-Hosted Container Security Plugin ID 444468

Description

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

- A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to
cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected
device. This vulnerability is due to improper boundary checks for content in DMG files during scanning,
which may result in an integer overflow on 32-bit platforms only. An attacker could exploit this
vulnerability by submitting a crafted file that contains DMG content to be scanned by ClamAV on an
affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to
terminate, resulting in a DoS condition on the affected software. (CVE-2026-20244)

- A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to
cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected
device. This vulnerability is due to improper boundary checks for content in PE files during scanning,
which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by
submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A
successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting
in a DoS condition on the affected software. (CVE-2026-20213)

- A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to
cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected
device. This vulnerability is due to improper boundary checks for content in FSG files during scanning,
which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by
submitting a crafted file that contains portable executable content compressed with FSG to be scanned by
ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning
process to terminate, resulting in a DoS condition on the affected software. (CVE-2026-20214)

- A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to
cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected
device. This vulnerability is due to improper boundary checks for content in 7z files during scanning,
which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by
submitting a crafted file that contains 7z content to be scanned by ClamAV on an affected device. A
successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting
in a DoS condition on the affected software. (CVE-2026-20215)

- A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote
attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of
temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a
crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow
the attacker to terminate the ClamAV scanning process and temporarily consume available system resources,
resulting in a DoS condition on the affected software. (CVE-2026-20216)

Solution

Update the clamav library and its related packages to version 1.4.5-r0 or later.

Plugin Details

Severity: High

ID: 444468

Version: Revision 1.1

Type: Local

Family: Alpine Linux Local Security Checks

Published: 7/7/2026

Updated: 7/7/2026

Supported Sensors: Agentless Assessment

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.75

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2026-20244

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 7/1/2026

Reference Information

CVE: CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244

Detections

Analytics