Denial Of Service (DoS)

clamav is vulnerable to denial of service DoS. The vulenrability exists as a Out of bounds heap memory read vulnerability in XAR parser, function xarhashcheck that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must sca...

clamav:clamav_scanfile_fuzzer: Heap-buffer-overflow in cli_codepage_to_utf8

Detailed Report: https://oss-fuzz.com/testcase?key=5732268351160320 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavscanfilefuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61900000cc9a Crash State: clicodepagetoutf8...

The vulnerability of the ClamAV antivirus software allows a hacker to trigger a service failure.

The vulnerability of the ClamAV antivirus software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a hacker to cause a service failure by sending specially crafted messages to the vulnerable system...

Clamscan Injection Vulnerability

clamscan is a command line tool that is mainly used to scan files or directories for viruses. An injection vulnerability exists in the 'isclamavbinary' function in the Index.js file in clamscan 1.2.0 and earlier versions. An attacker can exploit this vulnerability by sending a specially crafted...

clamav:clamav_scanmap_PDF_fuzzer: Stack-buffer-overflow in rijndaelSetupEncrypt

Detailed Report: https://oss-fuzz.com/testcase?key=5747616983023616 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavscanmapPDFfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f7d47869030 Crash State: rijndaelSetupEncrypt...

GLSA-202003-46 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-46 ClamAV: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could cause ClamAV to scan a specially...

ClamAV: Multiple vulnerabilities

Background ClamAV is a GPL virus scanner. Description Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details. Impact A remote attacker could cause ClamAV to scan a specially crafted file, possibly resulting in a Denial of Service...

Updated clamav packages fix security vulnerability

The updated packages fix a security vulnerability: A vulnerability in the Data-Loss-Prevention DLP module in Clam AntiVirus ClamAV Software versions 0.102.1 and 0.102.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability ...

Ubuntu 16.04 LTS / 18.04 LTS : ClamAV vulnerability (USN-4280-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4280-1 advisory. It was discovered that ClamAV incorrectly handled memory when the Data-Loss-Prevention DLP feature was enabled. A remote attacker could possibly use...

Debian DLA-2108-1 : clamav security update

It was found that ClamAV, an antivirus software, was susceptible to a denial of service attack by unauthenticated users via inefficient MIME parsing of especially crafted email files. For Debian 8 'Jessie', this problem has been fixed in version 0.101.5+dfsg-0+deb8u1. We recommend that you upgrad...

Debian: Security Advisory (DLA-2108-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4280-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4280-2 clamav vulnerability

USN-4280-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled memory when the Data-Loss-Prevention DLP feature was enabled. A remote attacker could...

USN-4280-2: ClamAV vulnerability

USN-4280-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled memory when the Data-Loss-Prevention DLP feature was enabled. A remote attacker could...

[SECURITY] [DLA 2108-1] clamav security update

Package : clamav Version : 0.101.5+dfsg-0+deb8u1 CVE ID : CVE-2019-15961 Debian Bug : 945265 It was found that ClamAV, an antivirus software, was susceptible to a denial of service attack by unauthenticated users via inefficient MIME parsing of especially crafted email files. For Debian 8 "Jessie...

USN-4280-1 clamav vulnerability

It was discovered that ClamAV incorrectly handled memory when the Data-Loss-Prevention DLP feature was enabled. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service...

USN-4280-1: ClamAV vulnerability

It was discovered that ClamAV incorrectly handled memory when the Data-Loss-Prevention DLP feature was enabled. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service...

DLA-2108-1 clamav - security update

Bulletin has no description...

FreeBSD : clamav -- Denial-of-Service (DoS) vulnerability (e7bc2b99-485a-11ea-bff9-9c5c8e75236a)

Micah Snyder reports : A denial-of-service DoS condition may occur when using the optional credit card data-loss-prevention DLP feature. Improper bounds checking of an unsigned variable resulted in an out-of-bounds read, which causes a crash. C Tenable Network Security, Inc. The descriptive text...

CVE-2020-3123

A vulnerability in the Data-Loss-Prevention DLP module in Clam AntiVirus ClamAV Software versions 0.102.1 and 0.102.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to an out-of-bounds read affecting users tha...