SUSE-SU-2022:14882-1 Security update for clamav

This update for clamav fixes the following issues: - CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. bsc1194731...

SUSE SLES12 Security Update : clamav (SUSE-SU-2022:0160-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0160-1 advisory. - CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. bsc1194731 Tenable has extracted the preceding description...

USN-5233-2 clamav vulnerability

USN-5233-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled memory when the CLSCANGENERALCOLLECTMETADATA scan option was enabled. A remote attacker...

CVE-2022-20698

A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that m...

Denial Of Service (DoS)

clamav is vulnerable to denial of service. An unauthenticated remote attacker is able to cause a denial of service condition in the application via a malicious PDF file due to improper error handling that may result in an infinite loop...

UBUNTU-CVE-2021-1252

A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus ClamAV Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper error handling that may result in...

UBUNTU-CVE-2021-1405

A vulnerability in the email parsing module in Clam AntiVirus ClamAV Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper variable initialization that may...

ClamAV 安全漏洞

ClamAV Clam AntiVirus is a free and open source antivirus program from the Clamav team. The program is used to detect Trojans, viruses, malware and other malicious threats. ClamAV has a security vulnerability that can be exploited by attackers to trigger a denial of service by parsing ClamAV file...

The vulnerability of the ClamAV antivirus software allows a hacker to trigger a service failure.

The vulnerability of the ClamAV antivirus software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a hacker to cause a service failure by sending specially crafted messages to the vulnerable system...

USN-4280-2 clamav vulnerability

USN-4280-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled memory when the Data-Loss-Prevention DLP feature was enabled. A remote attacker could...

USN-4230-2 clamav vulnerability

USN-4230-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled certain MIME messages. A remote attacker could possibly use this issue to cause ClamAV ...

ALPINE-CVE-2019-15961

A vulnerability in the email parsing module Clam AntiVirus ClamAV Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to inefficient MIME parsing routines that result in...

DEBIAN-CVE-2013-7089

ClamAV before 0.97.7: dbgprinthex possible information leak...

CVE-2013-7087

ClamAV before 0.97.7 has WWPack corrupt heap memory...

CVE-2013-7088

ClamAV before 0.97.7 has buffer overflow in the libclamav component...

CVE-2007-6745

clamav 0.91.2 suffers from a floating point exception when using ScanOLE2...

Code injection

clamav 0.91.2 suffers from a floating point exception when using ScanOLE2...

CVE-2007-6745

clamav 0.91.2 suffers from a floating point exception when using ScanOLE2...

CVE-2007-6745

clamav 0.91.2 suffers from a floating point exception when using ScanOLE2...

DEBIAN-CVE-2019-1789

ClamAV versions prior to 0.101.2 are susceptible to a denial of service DoS vulnerability. An out-of-bounds heap read condition may occur when scanning PE files. An example is Windows EXE and DLL files that have been packed using Aspack as a result of inadequate bound-checking...