The vulnerability in the libclamav/message.c component of the Clam Antivirus protection system allows a hacker to cause a service failure.

The vulnerability of the libclamav/message.c component in the Clam Antivirus security tool is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure through a specially crafted email message...

CVE-2017-6418

CVE-2017-6418 affects ClamAV prior to 0.99.3. The issue is in libclamav/message.c, where a crafted e-mail message can trigger an out-of-bounds read, leading to DoS. Public documentation in the connected items confirms vulnerable code path and impact. Remediation documented in the connected source...

ClamAV Denial of Service Vulnerability (CNVD-2017-26574)

ClamAV Clam AntiVirus is a free and open source antivirus program developed by the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A denial of service vulnerability exists in the 'wwunpack' function of the libclamav/wwunpack.c file in ClamAV...

Updated clamav packages fix security vulnerability

ClamAV aka Clam AntiVirus before 0.99.2 allows remote attackers to cause a denial of service application crash via a crafted mew packer executable CVE-2016-1371. ClamAV aka Clam AntiVirus before 0.99.2 allows remote attackers to cause a denial of service application crash via a crafted 7z file...

ClamAV < 0.99.2 Multiple Vulnerabilities

Binary data 9793.prm...

ClamAV < 0.99.2 Multiple libclamav DoS

According to its version, the ClamAV clamd antivirus daemon running on the remote host is prior to 0.99.2. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in the libclamav library when handling specially crafted mew packer executables. An...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the libclamav-dev package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

CVE-2016-1405

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...

Design/Logic Flaw

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...

CVE-2016-1405

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...

Debian DLA-440-1 : dansguardian package update

As described in DLA-437-1, clamav has been updated to the most recent upstream version, 0.99. Due to a soname change in libclamav, packages depending on libclamav needed to be recompiled to work with the new libclamav7. At the time DLA-437-1 was sent, updated dansguardian packages were not...

Debian DLA-95-1 : clamav security update

Two bugs were discovered in clamav and are fixed by this release. One issue is in clamscan, the command line anti-virus scanner included in the package, which could lead to crashes when scanning certain files. CVE-2013-6497 The second issue is in libclamav which caused a heap buffer overflow when...

DLA-95-1 clamav - security update

Bulletin has no description...

CVE-2014-9050

Heap-based buffer overflow in the cliscanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service crash via a crafted y0da Crypter PE file...

CVE-2011-3627

The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service crash via vectors related to "recursion level" and 1 libclamav/bytecode.c and 2 libclamav/bytecodeapi.c...

CVE-2011-2721

CVE-2011-2721 : An off-by-one error in the cli_hm_scan function (matcher-hash.c) in libclamav, affecting ClamAV before 0.97.2. The vulnerability allows a remote attacker to cause a denial of service (daemon crash) via a crafted email during certain hash calculations. Mitigation: upgrade to clamav...

CVE-2011-2721

Off-by-one error in the clihmscan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service daemon crash via an e-mail message that is not properly handled during certain hash calculations...

Ubuntu Update for clamav USN-1179-1

Ubuntu Update for Linux kernel vulnerabilities USN-1179-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11791.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for clamav USN-1179-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

[USN-1179-1] ClamAV vulnerability

========================================================================== Ubuntu Security Notice USN-1179-1 July 28, 2011 clamav vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...

Ubuntu 9.10 / 10.04 LTS / 10.10 : clamav vulnerability (USN-1076-1)

It was discovered that the Microsoft Office processing code in libclamav improperly handled certain Visual Basic for Applications VBA data. This could allow a remote attacker to craft a document that could crash clamav or possibly execute arbitrary code. In the default installation, attackers wou...