3894 matches found
clamav -- Denial-of-Service (DoS) vulnerability
Micah Snyder reports: A Denial-of-Service DoS vulnerability may occur when scanning a specially crafted email file as a result of excessively long scan times. The issue is resolved by implementing several maximums in parsing MIME messages and by optimizing use of memory allocation...
Fedora Update for clamav FEDORA-2019-aabcb53ec6
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security fix for the ALT Linux 9 package clamav version 0.101.4-alt1
0.101.4-alt1 built Sept. 3, 2019 Sergey Y. Afonin in task 237013 Sept. 2, 2019 Sergey Y. Afonin - 0.101.4 CVE-2019-12900, additional handling CVE-2019-12625 which has been mitigated in 0.101.3...
Fedora 29 : clamav (2019-aabcb53ec6)
ClamAV 0.101.4 is a security patch release that addresses the following issues. - An out of bounds write was possible within ClamAV's NSIS bzip2 library when attempting decompression in cases where the number of selectors exceeded the max limit set by the library CVE-2019-12900. The issue has bee...
Security fix for the ALT Linux 8 package clamav version 0.101.4-alt1
Sept. 2, 2019 Sergey Y. Afonin 0.101.4-alt1 - 0.101.4 CVE-2019-12900, additional handling CVE-2019-12625 which has been mitigated in 0.101.3...
Security fix for the ALT Linux 10 package clamav version 0.101.4-alt1
Sept. 2, 2019 Sergey Y. Afonin 0.101.4-alt1 - 0.101.4 CVE-2019-12900, additional handling CVE-2019-12625 which has been mitigated in 0.101.3...
Fedora Update for clamav FEDORA-2019-5c2dc50262
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
FreeBSD : clamav -- multiple vulnerabilities (dbd1f627-c43b-11e9-a923-9c5c8e75236a)
Micah Snyder reports : - An out of bounds write was possible within ClamAV&s NSIS bzip2 library when attempting decompression in cases where the number of selectors exceeded the max limit set by the library CVE-2019-12900. The issue has been resolved by respecting that limit. - The zip bomb...
Fedora 30 : clamav (2019-5c2dc50262)
ClamAV 0.101.4 is a security patch release that addresses the following issues. - An out of bounds write was possible within ClamAV's NSIS bzip2 library when attempting decompression in cases where the number of selectors exceeded the max limit set by the library CVE-2019-12900. The issue has bee...
CVE-2019-12625
ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service condition by sending crafted messages to an affected system...
Clam AntiVirus Denial of Service Vulnerability
ClamAV Clam AntiVirus is a free and open source antivirus program from the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A denial of service vulnerability exists in ClamAV versions prior to 0.101.3, which can be exploited by attackers to cause ...
clamav -- multiple vulnerabilities
Micah Snyder reports: An out of bounds write was possible within ClamAV&s NSIS bzip2 library when attempting decompression in cases where the number of selectors exceeded the max limit set by the library CVE-2019-12900. The issue has been resolved by respecting that limit. The zip bomb...
Fedora 29 : clamav (2019-efb0df248c)
Update to 0.101.3 - Fix freshclam.conf permissions ---- - One year later we may remove packages clamav-milter-systemd, clamav-scanner-systemd and clamav-server-systemd that was used for one workaround. Note that Tenable Network Security has extracted the preceding description block directly from...
Fedora 30 : clamav (2019-1c3fd1a4e0)
Update to 0.101.3 - Fix freshclam.conf permissions Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Update for clamav FEDORA-2019-efb0df248c
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for clamav FEDORA-2019-1c3fd1a4e0
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
clamav/clamav_scanmap_fuzzer: Index-out-of-bounds in real_scansis
Detailed report: https://oss-fuzz.com/testcase?key=5165813392211968 Project: clamav Fuzzer: libFuzzerclamavscanmapfuzzer Fuzz target binary: clamavscanmapfuzzer Job Type: libfuzzerubsanclamav Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: realscansis cliscansis...
CVE-2018-20902
cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation SEC-408...
