[SECURITY] Fedora 27 Update: clamav-0.99.4-1.fc27

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

The vulnerability in the messageAddArgument function of the Clam Antivirus protection library allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability in the AddArgument function of the Clam Antivirus protection tool arises from an operation that goes beyond the buffer boundaries in memory during message processing. Exploiting this vulnerability allows a remote attacker to cause service failures or execute arbitrary code using...

The vulnerability of the lzma_bswap_4861dc function in the Clam Antivirus protection tool allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the lzmabswap4861dc function mew.c in the Clam Antivirus security tool arises from the operation going beyond buffer boundaries in memory during the scanning of malicious files. Exploiting this vulnerability allows a remote attacker to cause service failures or execute...

[SECURITY] Fedora 26 Update: clamav-0.99.3-1.fc26

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

Debian: Security Advisory (DLA-1014-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 27 Update: clamav-0.99.3-1.fc27

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

ClamAV Buffer Out-of-Bounds Read Vulnerability

ClamAV AntiVirus software is a free and open source antivirus software developed by ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A security vulnerability exists in ClamAV AntiVirus software, which stems from the program's failure to properly...

ALPINE-CVE-2017-12377

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

[SECURITY] Fedora 26 Update: clamav-0.99.2-18.fc26

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

[SECURITY] Fedora 27 Update: clamav-0.99.2-18.fc27

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

The vulnerability in the libclamav/message.c component of the Clam Antivirus protection system allows a hacker to cause a service failure.

The vulnerability of the libclamav/message.c component in the Clam Antivirus security tool is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure through a specially crafted email message...

The vulnerability of the wwunpack function (libclamav/wwunpack.c) in the Clam Antivirus anti-virus tool allows a hacker to cause a service failure.

The vulnerability of the wwunpack function in the Clam Antivirus protection tool libclamav/wwunpack.c is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a specially created PE file, compressed with WWPack...

DEBIAN-CVE-2017-6419

mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted CHM file...

Debian DLA-1014-1 : libclamunrar security update

It was discovered that there was an arbitrary code execution vulnerability in libcamunrar, a library to add unrar support to the Clam anti-virus software. This was caused by an integer overflow resulting in a negative value of the DestPos variable, which allows the attacker to write out of bounds...

CVE-2016-1371

ClamAV before 0.99.2 is affected by CVE-2016-1371 and CVE-2016-1372 (and related issues) due to parsing crafted mew packer and 7z files, enabling remote DoS or application crash. Affected component is libclamav/clamav daemons prior to 0.99.2; impact is partial availability denial of service. Debi...

CVE-2016-1405

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...

Design/Logic Flaw

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...

Cisco ESA and WSA AMP ClamAV Denial of Service Vulnerability

A vulnerability in the Clam AntiVirus ClamAV software that is used by Cisco Advance Malware Protection AMP for Cisco Email Security Appliances ESAs and Cisco Web Security Appliances WSAs could allow an unauthenticated, remote attacker to cause the AMP process to restart. The vulnerability is due ...

[SECURITY] Fedora 20 Update: clamav-0.98.7-1.fc20

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

[SECURITY] Fedora 22 Update: clamav-0.98.7-1.fc22

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...