[SECURITY] [DLA 3544-1] clamav security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3544-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 28, 2023 https://wiki.debian.org/LTS -...

Debian dla-3544 : clamav - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3544 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3544-1 [email protected] https://www.debian.org/lts/security/...

Fedora 37 : clamav (2023-9f948bec13)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9f948bec13 advisory. CVE-2023-20197 ClamAV File Scanning Infinite Loop Denial of Service Vulnerability Tenable has extracted the preceding description block directly fro...

OESA-2023-1540 clamav security update

Clam AntiVirus clamav is an open source antivirus engine for detecting trojans, viruses, malware & other malicious threats. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command lin...

Fedora 38 : clamav (2023-bf72d8833e)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-bf72d8833e advisory. CVE-2023-20197 ClamAV File Scanning Infinite Loop Denial of Service Vulnerability Tenable has extracted the preceding description block directly fro...

USN-6303-2 clamav vulnerability

USN-6303-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: It was discovered that ClamAV incorrectly handled parsing HFS+ files. A remote attacker could possibly use this issue ...

USN-6303-2: ClamAV vulnerability

USN-6303-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: It was discovered that ClamAV incorrectly handled parsing HFS+ files. A remote attacker could possibly use this issue ...

USN-6303-1 clamav vulnerability

It was discovered that ClamAV incorrectly handled parsing HFS+ files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service...

USN-6303-1: ClamAV vulnerability

It was discovered that ClamAV incorrectly handled parsing HFS+ files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service...

The vulnerability of the syntax analyzer of the file system for Hierarchical File System Plus (HFS+) in ClamAV allows a perpetrator to trigger a service failure due to improper cleaning or release of resources.

The vulnerability of the syntax analyzer for the Hierarchical File System Plus HFS+ ClamAV is related to improper cleaning or release of resources. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted version of the HFS+ file system image...

Ubuntu 16.04 ESM / 18.04 ESM : ClamAV vulnerability (USN-6303-2)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6303-2 advisory. USN-6303-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : ClamAV vulnerability (USN-6303-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6303-1 advisory. It was discovered that ClamAV incorrectly handled parsing HFS+ files. A remote attacker could possibly use this issue to cause ClamAV to crash...

CVE-2023-20197

A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is...

UBUNTU-CVE-2023-20197

A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is...

FreeBSD : clamav -- Possible denial of service vulnerability in the HFS+ file parser (51a59f36-3c58-11ee-b32e-080027f5fec9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 51a59f36-3c58-11ee-b32e-080027f5fec9 advisory. - A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could...

SUSE CVE-2023-20197

A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is...

DEBIAN-CVE-2023-20197

A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is...

CVE-2023-20197

A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is...

CVE-2023-20197

A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is...

Race condition

A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is...