CVE-2008-3913: Clamav

Medium severity, CVSS 5.0. EPSS: 3.1% chance of exploitation in the next 30 days.

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) via unspecified vectors related to "error handling logic".

Affected products

  • Clamav Clamav: before 0.94 (fixed in 0.94)
  • Debian Debian Linux: version 4.0 only

Published 2008-09-11. Last modified 2026-06-16.