openSUSE Security Update : clamav (openSUSE-2019-2595)

This update for clamav fixes the following issues : Security issue fixed : - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458...

Fedora 30 : clamav (2019-dcbfe89e39)

Drop [email protected] file bz1725810 ClamAV 0.101.5 is a security patch release that addresses the following issues. - CVE-2019-15961: A Denial-of-Service DoS vulnerability may occur when scanning a specially crafted email file as a result of excessively long scan times. The issue is resolved...

openSUSE: Security Advisory for clamav (openSUSE-SU-2019:2597-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for clamav (moderate)

openSUSE Security Update: Security update for clamav Announcement ID: openSUSE-SU-2019:2597-1 Rating: moderate References: 1144504 1149458 1151839 Cross-References: CVE-2019-12625 CVE-2019-12900 Affected Products: openSUSE Leap 15.0 An update that solves two vulnerabilities and has one errata is...

OPENSUSE-SU-2019:2597-1 Security update for clamav

This update for clamav fixes the following issues: Security issue fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458...

OPENSUSE-SU-2019:2595-1 Security update for clamav

This update for clamav fixes the following issues: Security issue fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458...

Security update for clamav (moderate)

openSUSE Security Update: Security update for clamav Announcement ID: openSUSE-SU-2019:2595-1 Rating: moderate References: 1144504 1149458 1151839 Cross-References: CVE-2019-12625 CVE-2019-12900 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errata is...

Security fix for the ALT Linux 9 package clamav version 0.101.5-alt1

0.101.5-alt1 built Nov. 28, 2019 Sergey Y. Afonin in task 241709 Nov. 26, 2019 Sergey Y. Afonin - 0.101.5 CVE-2019-15961 - fixed tests for libcheck 0.13.0 clamav-0.101.5-libcheck-0.13.0.patch - updated License tag to SPDX syntax needs revision of exceptions - removed rpm-build-licenses from...

SUSE SLED12 / SLES12 Security Update : clamav (SUSE-SU-2019:3066-1)

This update for clamav fixes the following issues : Security issue fixed : CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458. Non-securit...

ClamAV < 0.102.0 - (bytecode_vm) Code Execution Exploit

!/usr/bin/python ''' Finished : 22/07/2019 Pu8lished : 31/10/2019 Versi0n : Current ./exploit.py clambc --debug exploit SNIP $ ''' names = 'test1', 'read', 'write', 'seek', 'setvirusname', 'debugprintstr', 'debugpr...

SUSE-SU-2019:3066-1 Security update for clamav

This update for clamav fixes the following issues: Security issue fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458...

SUSE-SU-2019:14231-1 Security update for clamav

This update for clamav fixes the following issues: Security issues fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458...

ClamAV OLE2 Out-of-Bounds Write (CVE-2019-1788)

An out-of-bounds write vulnerability exists in ClamAV. The vulnerability is due to improper handling of OLE2 files. Successful exploitation could result in denial-of-service conditions...

Security fix for the ALT Linux 8 package clamav version 0.101.5-alt1

Nov. 26, 2019 Sergey Y. Afonin 0.101.5-alt1 - 0.101.5 CVE-2019-15961 - fixed tests for libcheck 0.13.0 clamav-0.101.5-libcheck-0.13.0.patch - updated License tag to SPDX syntax needs revision of exceptions - removed rpm-build-licenses from BuildRequires...

Security fix for the ALT Linux 10 package clamav version 0.101.5-alt1

Nov. 26, 2019 Sergey Y. Afonin 0.101.5-alt1 - 0.101.5 CVE-2019-15961 - fixed tests for libcheck 0.13.0 clamav-0.101.5-libcheck-0.13.0.patch - updated License tag to SPDX syntax needs revision of exceptions - removed rpm-build-licenses from BuildRequires...

FreeBSD : clamav -- Denial-of-Service (DoS) vulnerability (6ade62d9-0f62-11ea-9673-4c72b94353b5)

Micah Snyder reports : A Denial-of-Service DoS vulnerability may occur when scanning a specially crafted email file as a result of excessively long scan times. The issue is resolved by implementing several maximums in parsing MIME messages and by optimizing use of memory allocation. C Tenable...

SUSE SLED15 / SLES15 Security Update : clamav (SUSE-SU-2019:3053-1)

This update for clamav fixes the following issues : Security issue fixed : CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458. Non-securit...

SUSE-SU-2019:3053-1 Security update for clamav

This update for clamav fixes the following issues: Security issue fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458...

UBUNTU-CVE-2019-15961

A vulnerability in the email parsing module Clam AntiVirus ClamAV Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to inefficient MIME parsing routines that result in...

ClamAV CVE-2019-15961 Denial of Service Vulnerability

Description ClamAV is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Versions prior to ClamAV 0.102.1 and 0.101.5 are vulnerable. Technologies Affected Cisco ClamAV 0.100 Cisco ClamAV 0.101 Cisco ClamAV 0.101.4 Cisco ClamAV...