CVE-2007-2026: Amavis Virus Scanner

High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days.

The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported for AMaViS.

Affected products

  • Amavis Virus Scanner: any version
  • Gentoo File: version 4.20 only

Published 2007-04-13. Last modified 2026-06-16.