Lucene search
Gentoo FoundationGLSA-201412-05HistoryDec 09, 2014 - 12:00 a.m.
Clam AntiVirus: Denial of service
2014-12-0900:00:00
Gentoo Foundation
security.gentoo.org
14
0.151 Low
EPSS
Percentile
95.8%
Background
Clam AntiVirus is an open source (GPL) anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
Description
A heap-based buffer overflow exists in the cli_scanpe function in libclamav/pe.c in ClamAV.
Impact
A remote attacker could possibly cause a Denial of Service condition via a specially crafted file.
Workaround
There is no known workaround at this time.
Resolution
All Clam AntiVirus users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.98.5"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | app-antivirus/clamav | < 0.98.5 | UNKNOWN |
Related
nessus
nessus
GLSA-201412-05 : Clam AntiVirus: Denial of service
2014-12-10 00:00:00
Debian DLA-95-1 : clamav security update
2015-03-26 00:00:00
Fedora 19 : clamav-0.98.5-1.fc19 (2014-15463)
2014-11-28 00:00:00
cvelist
cvelist
CVE-2014-9050
2014-12-01 15:00:00
prion
prion
Heap overflow
2014-12-01 15:59:00
debiancve
debiancve
CVE-2014-9050
2014-12-01 15:59:00
cve
cve
CVE-2014-9050
2014-12-01 15:59:00
openvas
openvas
Gentoo Security Advisory GLSA 201412-05
2015-09-29 00:00:00
Fedora Update for clamav FEDORA-2014-15434
2015-01-05 00:00:00
Ubuntu: Security Advisory (USN-2423-1)
2022-08-26 00:00:00
ubuntucve
ubuntucve
CVE-2014-9050
2014-11-24 00:00:00
osv
osv
clamav - security update
2014-12-02 00:00:00
debian
debian
[SECURITY] [DLA 95-1] clamav security update
2014-12-02 21:37:38
suse
suse
Security update for clamav (important)
2014-12-21 19:04:40
Security update for clamav (important)
2014-12-05 10:04:48
Security update for clamav (important)
2014-12-05 21:04:59
fedora
fedora
[SECURITY] Fedora 19 Update: clamav-0.98.5-1.fc19
2014-11-27 08:37:32
[SECURITY] Fedora 21 Update: clamav-0.98.5-1.fc21
2014-12-06 10:32:13
securityvulns
securityvulns
ClamAV memory corruptions
2014-11-30 00:00:00
[USN-2423-1] ClamAV vulnerabilities
2014-11-30 00:00:00
ubuntu
ubuntu
ClamAV vulnerabilities
2014-11-26 00:00:00
mageia
mageia
Updated clamav packages fix security vulnerabilities
2014-11-26 13:14:01