Updated clamav packages fix security vulnerability

The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail...

Debian: Security Advisory (DLA-1105-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ClamAV < 0.99.3 Multiple libclamav DoS

According to its version, the ClamAV clamd antivirus daemon running on the remote host is prior to 0.99.3. It is, therefore, affected by multiple vulnerabilities - one, which expose the system to a DoS attack and another, which provides potential adversaries with Remote Code Execution capabilitie...

USN-3550-2: ClamAV vulnerabilities

USN-3550-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled parsing certain mail messages. A remote attacker could use this issue to cause ClamAV to crash,...

Ubuntu 14.04 LTS / 16.04 LTS : ClamAV vulnerabilities (USN-3550-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3550-1 advisory. It was discovered that ClamAV incorrectly handled parsing certain mail messages. A remote attacker could use this issue to cause ClamAV to...

Ubuntu: Security Advisory (USN-3550-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3550-1: ClamAV vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain mail messages. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-12374, CVE-2017-12375, CVE-2017-12379, CVE-2017-12380 It was discovered...

USN-3550-1 clamav vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain mail messages. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-12374, CVE-2017-12375, CVE-2017-12379, CVE-2017-12380 It was discovered...

Security fix for the ALT Linux 8 package clamav version 0.99.3-alt1

0.99.3-alt1 built Jan. 30, 2018 Sergey Y. Afonin in task 198652 Jan. 28, 2018 Sergey Y. Afonin - 0.99.3 multiple CVE's, look to README - removed cve-2017-6418.patch and cve-2017-6420.patch in upstream now...

Fedora Update for clamav FEDORA-2018-cb339851e7

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : clamav (2018-cb339851e7)

ClamAV 0.99.3 ============= This release is a security release and is recommended for all ClamAV users. Please see details below : 1. ClamAV UAF use-after-free Vulnerabilities CVE-2017-12374 --------------------------------------------------------------- The ClamAV AntiVirus software versions...

Debian: Security Advisory (DLA-1261-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1261-1 : clamav security update

Multiple vulnerabilities have been discovered in clamav, the ClamAV AntiVirus toolkit for Unix. Effects range from denial of service to potential arbitrary code execution. Additionally, this version fixes a longstanding issue that has recently resurfaced whereby a malformed virus signature databa...

GLSA-201801-19 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201801-19 ClamAV: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could cause ClamAV to scan a specially...

ClamAV heap buffer overflow vulnerability (CNVD-2018-03236)

ClamAV AntiVirus software is a free and open source antivirus software developed by ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A heap buffer overflow vulnerability exists in the mew.c file in ClamAV AntiVirus software, which stems from the...

ClamAV Null Pointer Dereference Vulnerability

ClamAV AntiVirus software is a free and open source antivirus software developed by ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A security vulnerability exists in ClamAV AntiVirus software that stems from the program's use of an incorrect inp...

CVE-2017-12374

The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail...

Fedora 26 : clamav (2018-a86bad9689)

Fixes some regressions of previous versions ---- Security fixes CVE-2017-6420 1483910, CVE-2017-6418 1483908 ---- Fixes for rhbz 1530678 and 1518016 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempt...

ClamAV <= 0.99.2 Multiple Vulnerabilities - Linux

ClamAV is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"; ifdescription...

UBUNTU-CVE-2017-12380

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mai...