CVE-2017-12380

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition.

• CWE-476

• http://blog.clamav.net/2018/01/clamav-0993-has-been-released.htmlRelease Notes, Vendor Advisory
• https://bugzilla.clamav.net/show_bug.cgi?id=11945Exploit, Issue Tracking, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/01/msg00035.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3550-1/
• https://usn.ubuntu.com/3550-2/
• http://blog.clamav.net/2018/01/clamav-0993-has-been-released.htmlRelease Notes, Vendor Advisory
• https://bugzilla.clamav.net/show_bug.cgi?id=11945Exploit, Issue Tracking, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/01/msg00035.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3550-1/
• https://usn.ubuntu.com/3550-2/

Published

Jan 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12375The ClamAV AntiVirus software versions 0.99.2 and prior cont…
• CVE-2017-12376ClamAV AntiVirus software versions 0.99.2 and prior contain …
• CVE-2017-12377ClamAV AntiVirus software versions 0.99.2 and prior contain …
• CVE-2017-12378ClamAV AntiVirus software versions 0.99.2 and prior contain …
• CVE-2017-12379ClamAV AntiVirus software versions 0.99.2 and prior contain …
• CVE-2017-1238IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vu…5.4
• CVE-2017-1239IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could …4.3
• CVE-2017-1240IBM Rhapsody DM products could reveal sensitive information …
• CVE-2017-1241An unspecified vulnerability in IBM Jazz Foundation based ap…
• CVE-2017-12410It is possible to exploit a Time of Check & Time of Use (TOC…
• CVE-2017-12412ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-de…
• CVE-2017-12413AXIS 2100 devices 2.43 have XSS via the URI, possibly relate…