SUSE CVE-2022-20796

On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus ClamAV versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of...

clamav -- Multiple vulnerabilities

Simon Scannell reports: CVE-2023-20032 Fixed a possible remote code execution vulnerability in the HFS+ file parser. CVE-2023-20052 Fixed a possible remote information leak vulnerability in the DMG file parser...

PT-2023-35517 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Memcpy-param-overlap, according to an OSS-Fuzz report. The crash state includes repeat and p ere, but ...

Threat Landscape Topic Summary Report: Cisco Talos Year in Review 2022

While our ongoing support to Ukraine and response to the Log4j vulnerabilities were two of our most comprehensive and impactful efforts in 2022, we also dealt with a multitude of other threats as the security community faced an expanding set of adversaries and malware. In January, we identified...

[SECURITY] [DLA 3220-1] clamav new upstream version

----------------------------------------------------------------------- Debian LTS Advisory DLA-3220-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 04, 2022 https://wiki.debian.org/LTS -...

DLA-3220-1 clamav - new upstream version

Bulletin has no description...

Debian dla-3220 : clamav - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3220 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3220-1 [email protected] https://www.debian.org/lts/security/...

Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 35 / 9.0.0 < 9.0.0 Patch 28 Multiple Vulnerabilities

According to its self-reported version number, Zimbra Collaboration Server is affected by a multiple vulnerabilities, as follows: - A vulnerability in the ClamAV package: On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and...

Threat Source newsletter (Nov. 3, 2022): Mastodon, evolution, and LiveJournal oh my!

Welcome to this weeks edition of the Threat Source newsletter. Im fascinated by how things live and die on the internet. Things that are ubiquitous to our daily lives are simply gone the next. LiveJournal and Myspace we hardly knew you. Elon Musks purchase of Twitter and the subsequent exodus led...

PT-2022-36704 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: cli ole2 extract, cli scanole2, and cli magic scan. No...

openSUSE: Security Advisory for clamav (SUSE-SU-2022:3249-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:3249-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : clamav (SUSE-SU-2022:3249-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3249-1 advisory. clamav was updated to 0.103.7 bsc1202986 Upgrade the vendored UnRAR library to version 6.1.7. Fix logical...

SUSE-SU-2022:3249-1 Security update for clamav

This update for clamav fixes the following issues: clamav was updated to 0.103.7 bsc1202986 Upgrade the vendored UnRAR library to version 6.1.7. Fix logical signature 'Intermediates' feature. Relax constraints on slightly malformed zip archives that contain overlapping file entries...

PT-2022-37522 · Clamav · Clamav

Name of the Vulnerable Software and Affected Versions: clamav versions prior to 0.103.7 Description: The issue is related to the clamav software, where an update to version 0.103.7 fixes several problems, including the upgrade of the UnRAR library to version 6.1.7, a fix for the logical signature...

SUSE SLES12 Security Update : clamav (SUSE-SU-2022:3139-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3139-1 advisory. clamav was updated to 0.103.7 bsc1202986 Upgrade the vendored UnRAR library to version 6.1.7. Fix logical signature 'Intermediates' feature...

SUSE SLES12 Security Update : clamav (SUSE-SU-2022:3125-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3125-1 advisory. clamav was updated to 0.103.7 bsc1202986 Upgrade the vendored UnRAR library to version 6.1.7. Fix logical signature 'Intermediates' feature...

SUSE: Security Advisory (SUSE-SU-2022:3139-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:3139-1 Security update for clamav

This update for clamav fixes the following issues: clamav was updated to 0.103.7 bsc1202986 Upgrade the vendored UnRAR library to version 6.1.7. Fix logical signature 'Intermediates' feature. Relax constraints on slightly malformed zip archives that contain overlapping file entries...

Amazon Linux 2022 : clamav, clamav-data, clamav-devel (ALAS2022-2022-090)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-090 advisory. A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause...