The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e8f7a74693 advisory.

    Update to 1.0.7

    * CVE-2024-20506: Changed the logging module to disable following symlinks on Linux and Unix systems so as     to prevent an attacker with existing access to the 'clamd' or 'freshclam' services from using a symlink to     corrupt system files.
    * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF file parser that could cause a     denial-of-service (DoS) condition.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3983 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3983-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Lucas Kanashiro     December 04, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : clamav     Version        : 1.0.7+dfsg-1~deb11u1     CVE ID         : CVE-2024-20505 CVE-2024-20506     Debian Bug     : #1080962

    Two vulnerabilities were found in ClamAV, an antivirus toolkit for Unix.

    CVE-2024-20505

        Affected versions could allow an unauthenticated, remote attacker to cause         a denial of service (DoS) condition on an affected device. The         vulnerability is due to an out of bounds read. An attacker could exploit         this vulnerability by submitting a crafted PDF file to be scanned by ClamAV         on an affected device. An exploit could allow the attacker to terminate the         scanning process.

    CVE-2024-20506

        Affected versions could allow an authenticated, local attacker to corrupt         critical system files. The vulnerability is due to allowing the ClamD         process to write to its log file while privileged without checking if the         logfile has been replaced with a symbolic link. An attacker could exploit         this vulnerability if they replace the ClamD log file with a symlink to a         critical system file and then find a way to restart the ClamD process. An         exploit could allow the attacker to corrupt a critical system file by         appending ClamD log messages after restart.

    ClamAV was updated to version 1.0.7+dfsg-1~deb10u1. Due to the library soname     bump, the reverse dependencies of libclamav9 were rebuilt against libclamav11.
    The following source packages were updated:

    - - c-icap-modules/1:0.5.4-2+deb11u1
    - - cyrus-imapd/3.2.6-2+deb11u3
    - - havp/0.93-2+deb11u1
    - - pg-snakeoil/1.3-2+deb11u1
    - - libclamunrar/1.0.3-1~deb11u1

    For Debian 11 bullseye, these problems have been fixed in version     1.0.7+dfsg-1~deb11u1.

    We recommend that you upgrade your clamav packages.

    For the detailed security status of clamav please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/clamav

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-737 advisory.

    A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior     versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and     0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of     service (DoS) condition on an affected device.The vulnerability is due to an out of bounds read. An     attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an     affected device. An exploit could allow the attacker to terminate the scanning process. (CVE-2024-20505)

    A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior     versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and     0.103.11 and all prior versions could allow an authenticated, local attacker to corrupt critical system     files.The vulnerability is due to allowing the ClamD process to write to its log file while privileged     without checking if the logfile has been replaced with a symbolic link. An attacker could exploit this     vulnerability if they replace the ClamD log file with a symlink to a critical system file and then find a     way to restart the ClamD process. An exploit could allow the attacker to corrupt a critical system file by     appending ClamD log messages after restart. (CVE-2024-20506)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of clamav installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-20505 advisory.

  - A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior     versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and     0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of     service (DoS) condition on an affected device. The vulnerability is due to an out of bounds read. An     attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an     affected device. An exploit could allow the attacker to terminate the scanning process. (CVE-2024-20505)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7011-1 advisory.

    It was discovered that ClamAV incorrectly handled certain PDF files. A remote attacker could possibly use     this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2024-20505)

    It was discovered that ClamAV incorrectly handled logfile privileges. A local attacker could use this     issue to cause ClamAV to overwrite arbitrary files, possibly leading to privilege escalation.
    (CVE-2024-20506)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3305-1 advisory.

    - Update to version 0.103.12
    - CVE-2024-20506: Disable symlinks following to prevent an attacker to corrupt system files. (bsc#1230162)
    - CVE-2024-20505: Fixed possible out-of-bounds read bug in the PDF file parser. (bsc#1230161)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The ClamAV reported version is < 103.12, 1.0.x < 1.0.7, 1.1.0 < x < 1.3.2, or 1.4.0 < 1.4.1  It is, therefore, affected by a Denial of Service vulnerability in the PDF parsing module, where an attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of clamav installed on the remote host is prior to 0.103.12-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2644 advisory.

    A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior     versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and     0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of     service (DoS) condition on an affected device.The vulnerability is due to an out of bounds read. An     attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an     affected device. An exploit could allow the attacker to terminate the scanning process. (CVE-2024-20505)

    A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior     versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and     0.103.11 and all prior versions could allow an authenticated, local attacker to corrupt critical system     files.The vulnerability is due to allowing the ClamD process to write to its log file while privileged     without checking if the logfile has been replaced with a symbolic link. An attacker could exploit this     vulnerability if they replace the ClamD log file with a symlink to a critical system file and then find a     way to restart the ClamD process. An exploit could allow the attacker to corrupt a critical system file by     appending ClamD log messages after restart. (CVE-2024-20506)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3306-1 advisory.

    - Update to version 0.103.12
    - CVE-2024-20506: Disable symlinks following to prevent an attacker to corrupt system files. (bsc#1230162)
    - CVE-2024-20505: Fixed possible out-of-bounds read bug in the PDF file parser. (bsc#1230161)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0328-1 advisory.

    New version 1.4.2:

      * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow         read bug in the OLE2 file parser that could cause a         denial-of-service (DoS) condition.

    - Start clamonacc with --fdpass to avoid errors due to       clamd not being able to access user files. (bsc#1232242)

    - New version 1.4.1:

      * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html

    - New version 1.4.0:

      * Added support for extracting ALZ archives.
      * Added support for extracting LHA/LZH archives.
      * Added the ability to disable image fuzzy hashing, if needed.
        For context, image fuzzy hashing is a detection mechanism         useful for identifying malware by matching images included with         the malware or phishing email/document.
      * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html

    - New version 1.3.2:

      * CVE-2024-20506: Changed the logging module to disable following         symlinks on Linux and Unix systems so as to prevent an attacker         with existing access to the 'clamd' or 'freshclam' services from         using a symlink to corrupt system files.
      * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF         file parser that could cause a denial-of-service condition.
      * Removed unused Python modules from freshclam tests including         deprecated 'cgi' module that is expected to cause test failures in         Python 3.13.
      * Fix unit test caused by expiring signing certificate.
      * Fixed a build issue on Windows with newer versions of Rust. Also         upgraded GitHub Actions imports to fix CI failures.
      * Fixed an unaligned pointer dereference issue on select architectures.
      * Fixes to Jenkins CI pipeline.


    - New Version: 1.3.1:

      * CVE-2024-20380: Fixed a possible crash in the HTML file parser         that could cause a denial-of-service (DoS) condition.
      * Updated select Rust dependencies to the latest versions.
      * Fixed a bug causing some text to be truncated when converting         from UTF-16.
      * Fixed assorted complaints identified by Coverity static         analysis.
      * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
      * Added the new 'valhalla' database name to the list of optional         databases in preparation for future work.

    - New version: 1.3.0:

      * Added support for extracting and scanning attachments found in         Microsoft OneNote section files. OneNote parsing will be         enabled by default, but may be optionally disabled.
      * Added file type recognition for compiled Python ('.pyc') files.
      * Improved support for decrypting PDFs with empty passwords.
      * Fixed a warning when scanning some HTML files.
      * ClamOnAcc: Fixed an infinite loop when a watched directory         does not exist.
      * ClamOnAcc: Fixed an infinite loop when a file has been deleted         before a scan.

    - New version: 1.2.0:

      * Added support for extracting Universal Disk Format (UDF)         partitions.
      * Added an option to customize the size of ClamAV's clean file         cache.
      * Raised the MaxScanSize limit so the total amount of data         scanned when scanning a file or archive may exceed 4 gigabytes.
      * Added ability for Freshclam to use a client certificate PEM         file and a private key PEM file for authentication to a private         mirror.
      * Fix an issue extracting files from ISO9660 partitions where the         files are listed in the plain ISO tree and there also exists an         empty Joliet tree.
      * PID and socket are now located under /run/clamav/clamd.pid and         /run/clamav/clamd.sock .
      * bsc#1211594: Fixed an issue where ClamAV does not abort the         signature load process after partially loading an invalid         signature.

    - New version 1.1.0:

      * https://blog.clamav.net/2023/05/clamav-110-released.html
      * Added the ability to extract images embedded in HTML CSS         <style> blocks.
      * Updated to Sigtool so that the '--vba' option will extract VBA         code from Microsoft Office documents the same way that         libclamav extracts VBA.
      * Added a new option --fail-if-cvd-older-than=days to clamscan         and clamd, and FailIfCvdOlderThan to clamd.conf
      * Added a new function 'cl_cvdgetage()' to the libclamav API.
      * Added a new function 'cl_engine_set_clcb_vba()' to the         libclamav API.
    - bsc#1180296: Integrate clamonacc as a service.
    - New version 1.0.1 LTS (including changes in 0.104 and 0.105):
      * As of ClamAV 0.104, CMake is required to build ClamAV.
      * As of ClamAV 0.105, Rust is now required to compile ClamAV.
      * Increased the default limits for file and scan size:
        * MaxScanSize: 100M to 400M
        * MaxFileSize: 25M to 100M
        * StreamMaxLength: 25M to 100M
        * PCREMaxFileSize: 25M to 100M
        * MaxEmbeddedPE: 10M to 40M
        * MaxHTMLNormalize: 10M to 40M
        * MaxScriptNormalize: 5M to 20M
        * MaxHTMLNoTags: 2M to 8M
      * Added image fuzzy hash subsignatures for logical signatures.
      * Support for decrypting read-only OLE2-based XLS files that are         encrypted with the default password.
      * Overhauled the implementation of the all-match feature.
      * Added a new callback to the public API for inspecting file         content during a scan at each layer of archive extraction.
      * Added a new function to the public API for unpacking CVD         signature archives.
      * The option to build with an external TomsFastMath library has         been removed. ClamAV requires non-default build options for         TomsFastMath to support bigger floating point numbers.
      * For a full list of changes see the release announcements:
        * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
        * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
        * https://blog.clamav.net/2021/09/clamav-01040-released.html
    - Build clamd with systemd support.

    * CVE-2023-20197: Fixed a possible denial of service vulnerability in       the HFS+ file parser. (bsc#1214342)
    * CVE-2018-14679: Fixed that an issue was discovered in mspack/chmd.c       in libmspack before 0.7alpha. There isan off-by-one error in the CHM       PMGI/PMGL chunk number validity checks, which could lead to denial of       service (uninitialized da (bsc#1103032)

    - Package huge .html documentation in a separate subpackage.

    - Update to 0.103.7 (bsc#1202986)

      - Zip parser: tolerate 2-byte overlap in file entries
      - Fix bug with logical signature Intermediates feature
      - Update to UnRAR v6.1.7
      - Patch UnRAR: allow skipping files in solid archives
      - Patch UnRAR: limit dict winsize to 1GB

    - Use a split-provides for clamav-milter instead of recommending it.
    - Package clamav-milter in a subpackage
    - Remove virus signatures upon uninstall
    - Check for database existence before starting clamd
    - Restart clamd when it exits
    - Don't daemonize freshclam, but use a systemd timer instead to       trigger updates

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0327-1 advisory.

    New version 1.4.2:

      * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow         read bug in the OLE2 file parser that could cause a         denial-of-service (DoS) condition.

    - Start clamonacc with --fdpass to avoid errors due to       clamd not being able to access user files. (bsc#1232242)

    - New version 1.4.1:

      * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html

    - New version 1.4.0:

      * Added support for extracting ALZ archives.
      * Added support for extracting LHA/LZH archives.
      * Added the ability to disable image fuzzy hashing, if needed.
        For context, image fuzzy hashing is a detection mechanism         useful for identifying malware by matching images included with         the malware or phishing email/document.
      * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html

    - New version 1.3.2:

      * CVE-2024-20506: Changed the logging module to disable following         symlinks on Linux and Unix systems so as to prevent an attacker         with existing access to the 'clamd' or 'freshclam' services from         using a symlink to corrupt system files.
      * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF         file parser that could cause a denial-of-service condition.
      * Removed unused Python modules from freshclam tests including         deprecated 'cgi' module that is expected to cause test failures in         Python 3.13.
      * Fix unit test caused by expiring signing certificate.
      * Fixed a build issue on Windows with newer versions of Rust. Also         upgraded GitHub Actions imports to fix CI failures.
      * Fixed an unaligned pointer dereference issue on select architectures.
      * Fixes to Jenkins CI pipeline.


    - New Version: 1.3.1:

      * CVE-2024-20380: Fixed a possible crash in the HTML file parser         that could cause a denial-of-service (DoS) condition.
      * Updated select Rust dependencies to the latest versions.
      * Fixed a bug causing some text to be truncated when converting         from UTF-16.
      * Fixed assorted complaints identified by Coverity static         analysis.
      * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
      * Added the new 'valhalla' database name to the list of optional         databases in preparation for future work.

    - New version: 1.3.0:

      * Added support for extracting and scanning attachments found in         Microsoft OneNote section files. OneNote parsing will be         enabled by default, but may be optionally disabled.
      * Added file type recognition for compiled Python ('.pyc') files.
      * Improved support for decrypting PDFs with empty passwords.
      * Fixed a warning when scanning some HTML files.
      * ClamOnAcc: Fixed an infinite loop when a watched directory         does not exist.
      * ClamOnAcc: Fixed an infinite loop when a file has been deleted         before a scan.

    - New version: 1.2.0:

      * Added support for extracting Universal Disk Format (UDF)         partitions.
      * Added an option to customize the size of ClamAV's clean file         cache.
      * Raised the MaxScanSize limit so the total amount of data         scanned when scanning a file or archive may exceed 4 gigabytes.
      * Added ability for Freshclam to use a client certificate PEM         file and a private key PEM file for authentication to a private         mirror.
      * Fix an issue extracting files from ISO9660 partitions where the         files are listed in the plain ISO tree and there also exists an         empty Joliet tree.
      * PID and socket are now located under /run/clamav/clamd.pid and         /run/clamav/clamd.sock .
      * bsc#1211594: Fixed an issue where ClamAV does not abort the         signature load process after partially loading an invalid         signature.

    - New version 1.1.0:

      * https://blog.clamav.net/2023/05/clamav-110-released.html
      * Added the ability to extract images embedded in HTML CSS         <style> blocks.
      * Updated to Sigtool so that the '--vba' option will extract VBA         code from Microsoft Office documents the same way that         libclamav extracts VBA.
      * Added a new option --fail-if-cvd-older-than=days to clamscan         and clamd, and FailIfCvdOlderThan to clamd.conf
      * Added a new function 'cl_cvdgetage()' to the libclamav API.
      * Added a new function 'cl_engine_set_clcb_vba()' to the         libclamav API.
    - bsc#1180296: Integrate clamonacc as a service.
    - New version 1.0.1 LTS (including changes in 0.104 and 0.105):
      * As of ClamAV 0.104, CMake is required to build ClamAV.
      * As of ClamAV 0.105, Rust is now required to compile ClamAV.
      * Increased the default limits for file and scan size:
        * MaxScanSize: 100M to 400M
        * MaxFileSize: 25M to 100M
        * StreamMaxLength: 25M to 100M
        * PCREMaxFileSize: 25M to 100M
        * MaxEmbeddedPE: 10M to 40M
        * MaxHTMLNormalize: 10M to 40M
        * MaxScriptNormalize: 5M to 20M
        * MaxHTMLNoTags: 2M to 8M
      * Added image fuzzy hash subsignatures for logical signatures.
      * Support for decrypting read-only OLE2-based XLS files that are         encrypted with the default password.
      * Overhauled the implementation of the all-match feature.
      * Added a new callback to the public API for inspecting file         content during a scan at each layer of archive extraction.
      * Added a new function to the public API for unpacking CVD         signature archives.
      * The option to build with an external TomsFastMath library has         been removed. ClamAV requires non-default build options for         TomsFastMath to support bigger floating point numbers.
      * For a full list of changes see the release announcements:
        * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
        * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
        * https://blog.clamav.net/2021/09/clamav-01040-released.html
    - Build clamd with systemd support.

    * CVE-2023-20197: Fixed a possible denial of service vulnerability in       the HFS+ file parser. (bsc#1214342)
    * CVE-2018-14679: Fixed that an issue was discovered in mspack/chmd.c       in libmspack before 0.7alpha. There isan off-by-one error in the CHM       PMGI/PMGL chunk number validity checks, which could lead to denial of       service (uninitialized da (bsc#1103032)

    - Package huge .html documentation in a separate subpackage.

    - Update to 0.103.7 (bsc#1202986)

      - Zip parser: tolerate 2-byte overlap in file entries
      - Fix bug with logical signature Intermediates feature
      - Update to UnRAR v6.1.7
      - Patch UnRAR: allow skipping files in solid archives
      - Patch UnRAR: limit dict winsize to 1GB

    - Use a split-provides for clamav-milter instead of recommending it.
    - Package clamav-milter in a subpackage
    - Remove virus signatures upon uninstall
    - Check for database existence before starting clamd
    - Restart clamd when it exits
    - Don't daemonize freshclam, but use a systemd timer instead to       trigger updates

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
207268	Fedora 40 : clamav (2024-e8f7a74693)	Nessus	Fedora Local Security Checks	2024/9/14	2026/1/21	medium
212107	Debian dla-3983 : clamav - security update	Nessus	Debian Local Security Checks	2024/12/6	2026/1/21	medium
208977	Amazon Linux 2023 : clamav, clamav-data, clamav-devel (ALAS2023-2024-737)	Nessus	Amazon Linux Local Security Checks	2024/10/14	2026/1/21	medium
215810	Azure Linux 3.0 Security Update: clamav (CVE-2024-20505)	Nessus	Azure Linux Local Security Checks	2025/2/10	2026/1/21	high
207280	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : ClamAV vulnerabilities (USN-7011-1)	Nessus	Ubuntu Local Security Checks	2024/9/16	2026/1/21	medium
207414	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : clamav (SUSE-SU-2024:3305-1)	Nessus	SuSE Local Security Checks	2024/9/19	2026/1/21	medium
207494	ClamAV < 0.103.12, 1.0.0 < 1.0.7, 1.1.0 < 1.3.2, 1.4.0 < 1.4.1 DoS	Nessus	Misc.	2024/9/20	2026/1/21	high
208113	Amazon Linux 2 : clamav (ALAS-2024-2644)	Nessus	Amazon Linux Local Security Checks	2024/10/3	2026/1/21	medium
207423	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : clamav (SUSE-SU-2024:3306-1)	Nessus	SuSE Local Security Checks	2024/9/19	2026/1/21	medium
214890	SUSE SLES12: clamav / clamav-devel / clamav-docs-html / clamav-milter / etc (SUSE-SU-2025:0328-1)	Nessus	SuSE Local Security Checks	2025/2/3	2026/6/26	medium
214899	SUSE SLED15: clamav / clamav-devel / clamav-docs-html / clamav-milter / etc (SUSE-SU-2025:0327-1)	Nessus	SuSE Local Security Checks	2025/2/3	2026/6/26	medium

检测

插件搜索

medium

medium

medium

high

medium

medium

high

medium

medium

medium

medium