USN-3592-2: ClamAV vulnerabilities

USN-3592-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resultin...

USN-3592-1: ClamAV vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-0202 Hanno Böck discovered that ClamAV incorrectly handled parsing certain X...

USN-3592-1 clamav vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-0202 Hanno Böck discovered that ClamAV incorrectly handled parsing certain X...

Fedora 27 : clamav (2018-602b5345fa)

Update to 0.99.4 0.99.4 addresses a few outstanding vulnerability bugs. It includes fixes for : - CVE-2012-6706 - CVE-2017-6419 - CVE-2017-11423 - CVE-2018-1000085 There are also a few bug fixes that were not assigned CVEs, but were important enough to address while we had the chance. One of thes...

CVE-2018-0202

clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format .pdf...

UBUNTU-CVE-2018-0202

clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format .pdf...

Security fix for the ALT Linux 10 package clamav version 0.99.4-alt1

March 4, 2018 Sergey Y. Afonin 0.99.4-alt1 - 0.99.4 CVE-2012-6706, CVE-2017-6419, CVE-2017-11423, CVE-2018-0202, and CVE-2018-1000085...

Security fix for the ALT Linux 9 package clamav version 0.99.4-alt1

March 4, 2018 Sergey Y. Afonin 0.99.4-alt1 - 0.99.4 CVE-2012-6706, CVE-2017-6419, CVE-2017-11423, CVE-2018-0202, and CVE-2018-1000085...

Security fix for the ALT Linux 8 package clamav version 0.99.4-alt1

March 4, 2018 Sergey Y. Afonin 0.99.4-alt1 - 0.99.4 CVE-2012-6706, CVE-2017-6419, CVE-2017-11423, CVE-2018-0202, and CVE-2018-1000085...

CVE-2018-1000085

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xarhashcheck that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This...

UBUNTU-CVE-2018-1000085

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xarhashcheck that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This...

Amazon Linux AMI : clamav (ALAS-2018-958)

Heap-based buffer overflow in mspack/lzxd.c : mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted CHM file.CVE-2017-6419 The...

Medium: clamav

Issue Overview: Heap-based buffer overflow in mspack/lzxd.c: mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted CHM...

Debian: Security Advisory (DLA-1279-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1279-1 : clamav security update

CVE-2017-6419 CVE-2017-11423 Two vulnerabilities have been fixed that can be used for denial of service or maybe unspecified impact via drafted files heap-based buffer overflow and stack-based buffer over-read causing application crash For Debian 7 'Wheezy', these problems have been fixed in...

[SECURITY] [DLA 1279-1] clamav security update

Package : clamav Version : 0.99.2+dfsg-0+deb7u5 CVE ID : CVE-2017-6419 CVE-2017-11423 CVE-2017-6419 CVE-2017-11423 Two vulnerabilities have been fixed that can be used for denial of service or maybe unspecified impact via drafted files heap-based buffer overflow and stack-based buffer over-read...

DLA-1279-1 clamav - security update

Bulletin has no description...

[ASA-201802-1] clamav: multiple issues

Arch Linux Security Advisory ASA-201802-1 ========================================= Severity: Critical Date : 2018-02-09 CVE-ID : CVE-2017-12374 CVE-2017-12375 CVE-2017-12376 CVE-2017-12377 CVE-2017-12378 CVE-2017-12379 CVE-2017-12380 CVE-2017-6418 CVE-2017-6420 Package : clamav Type : multiple...

Fedora Update for clamav FEDORA-2018-958b22c73f

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : clamav (2018-958b22c73f)

ClamAV 0.99.3 ============= This release is a security release and is recommended for all ClamAV users. Please see details below : 1. ClamAV UAF use-after-free Vulnerabilities CVE-2017-12374 --------------------------------------------------------------- The ClamAV AntiVirus software versions...