4065 matches found
Security update for clamav (moderate)
openSUSE Security Update: Security update for clamav Announcement ID: openSUSE-SU-2019:2595-1 Rating: moderate References: 1144504 1149458 1151839 Cross-References: CVE-2019-12625 CVE-2019-12900 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errata is...
Security fix for the ALT Linux 9 package clamav version 0.101.5-alt1
0.101.5-alt1 built Nov. 28, 2019 Sergey Y. Afonin in task 241709 Nov. 26, 2019 Sergey Y. Afonin - 0.101.5 CVE-2019-15961 - fixed tests for libcheck 0.13.0 clamav-0.101.5-libcheck-0.13.0.patch - updated License tag to SPDX syntax needs revision of exceptions - removed rpm-build-licenses from...
ClamAV < 0.102.0 - (bytecode_vm) Code Execution Exploit
!/usr/bin/python ''' Finished : 22/07/2019 Pu8lished : 31/10/2019 Versi0n : Current ./exploit.py clambc --debug exploit SNIP $ ''' names = 'test1', 'read', 'write', 'seek', 'setvirusname', 'debugprintstr', 'debugpr...
SUSE SLED12 / SLES12 Security Update : clamav (SUSE-SU-2019:3066-1)
This update for clamav fixes the following issues : Security issue fixed : CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458. Non-securit...
SUSE-SU-2019:3066-1 Security update for clamav
This update for clamav fixes the following issues: Security issue fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458...
SUSE-SU-2019:14231-1 Security update for clamav
This update for clamav fixes the following issues: Security issues fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458...
FreeBSD : clamav -- Denial-of-Service (DoS) vulnerability (6ade62d9-0f62-11ea-9673-4c72b94353b5)
Micah Snyder reports : A Denial-of-Service DoS vulnerability may occur when scanning a specially crafted email file as a result of excessively long scan times. The issue is resolved by implementing several maximums in parsing MIME messages and by optimizing use of memory allocation. C Tenable...
ClamAV OLE2 Out-of-Bounds Write (CVE-2019-1788)
An out-of-bounds write vulnerability exists in ClamAV. The vulnerability is due to improper handling of OLE2 files. Successful exploitation could result in denial-of-service conditions...
Security fix for the ALT Linux 10 package clamav version 0.101.5-alt1
Nov. 26, 2019 Sergey Y. Afonin 0.101.5-alt1 - 0.101.5 CVE-2019-15961 - fixed tests for libcheck 0.13.0 clamav-0.101.5-libcheck-0.13.0.patch - updated License tag to SPDX syntax needs revision of exceptions - removed rpm-build-licenses from BuildRequires...
SUSE SLED15 / SLES15 Security Update : clamav (SUSE-SU-2019:3053-1)
This update for clamav fixes the following issues : Security issue fixed : CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458. Non-securit...
Security fix for the ALT Linux 8 package clamav version 0.101.5-alt1
Nov. 26, 2019 Sergey Y. Afonin 0.101.5-alt1 - 0.101.5 CVE-2019-15961 - fixed tests for libcheck 0.13.0 clamav-0.101.5-libcheck-0.13.0.patch - updated License tag to SPDX syntax needs revision of exceptions - removed rpm-build-licenses from BuildRequires...
SUSE-SU-2019:3053-1 Security update for clamav
This update for clamav fixes the following issues: Security issue fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458...
UBUNTU-CVE-2019-15961
A vulnerability in the email parsing module Clam AntiVirus ClamAV Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to inefficient MIME parsing routines that result in...
ClamAV CVE-2019-15961 Denial of Service Vulnerability
Description ClamAV is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Versions prior to ClamAV 0.102.1 and 0.101.5 are vulnerable. Technologies Affected Cisco ClamAV 0.100 Cisco ClamAV 0.101 Cisco ClamAV 0.101.4 Cisco ClamAV...
Updated clamav packages fix security vulnerabilities
The updated packages fix security vulnerabilities: ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service condition by sending crafted messages to an affected system. CVE-2019-12625 BZ2decompress in decompress.c...
MGASA-2019-0328 Updated clamav packages fix security vulnerabilities
The updated packages fix security vulnerabilities: ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service condition by sending crafted messages to an affected system. CVE-2019-12625 BZ2decompress in decompress.c...
ClamAV Information Disclosure Vulnerability
ClamAV Clam AntiVirus is a free and open source antivirus program from the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. An information disclosure vulnerability exists in the 'dbgprinthex' function in versions of ClamAV prior to 0.97.7, which c...
ClamAV Memory Corruption Vulnerability
ClamAV Clam AntiVirus is a free and open source antivirus program from the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A memory corruption vulnerability exists in ClamAV versions prior to 0.97.7, which can be exploited by an attacker to execu...
ClamAV libclamav Component Buffer Overflow Vulnerability
ClamAV Clam AntiVirus is a free and open source antivirus program from the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A buffer overflow vulnerability exists in the libclamav component in versions of ClamAV prior to 0.97.7. The vulnerability...