Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2423-1
HistoryNov 26, 2014 - 12:00 a.m.

ClamAV vulnerabilities

2014-11-2600:00:00
ubuntu.com
34

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.4 High

AI Score

Confidence

Low

0.142 Low

EPSS

Percentile

95.7%

JSON

Releases

  • Ubuntu 14.10
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • clamav - Anti-virus utility for Unix

Details

Kurt Seifried discovered that ClamAV incorrectly handled certain JavaScript
files. An attacker could possibly use this issue to cause ClamAV to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2013-6497)

Damien Millescamp discovered that ClamAV incorrectly handled certain PE
files. An attacker could possibly use this issue to cause ClamAV to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2014-9050)

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchclamav< 0.98.5+dfsg-0ubuntu0.14.10.1UNKNOWN
Ubuntu14.10noarchclamav-daemon< 0.98.5+dfsg-0ubuntu0.14.10.1UNKNOWN
Ubuntu14.10noarchclamav-dbg< 0.98.5+dfsg-0ubuntu0.14.10.1UNKNOWN
Ubuntu14.10noarchclamav-freshclam< 0.98.5+dfsg-0ubuntu0.14.10.1UNKNOWN
Ubuntu14.10noarchclamav-milter< 0.98.5+dfsg-0ubuntu0.14.10.1UNKNOWN
Ubuntu14.10noarchlibclamav-dev< 0.98.5+dfsg-0ubuntu0.14.10.1UNKNOWN
Ubuntu14.10noarchlibclamav6< 0.98.5+dfsg-0ubuntu0.14.10.1UNKNOWN
Ubuntu14.04noarchclamav< 0.98.5+addedllvm-0ubuntu0.14.04.1UNKNOWN
Ubuntu14.04noarchclamav-daemon< 0.98.5+addedllvm-0ubuntu0.14.04.1UNKNOWN
Ubuntu14.04noarchclamav-dbg< 0.98.5+addedllvm-0ubuntu0.14.04.1UNKNOWN
Rows per page:
1-10 of 211

Related

nessus 14
openvas 15
debian 1
osv 1
fedora 3
securityvulns 2
suse 4
mageia 1
cvelist 2
gentoo 1
nvd 2
ubuntucve 2
amazon 1
debiancve 2
prion 2
cve 2
archlinux 1
ubuntu 1
nessus
nessus
Debian DLA-95-1 : clamav security update
2015-03-26 00:00:00
Ubuntu 14.04 LTS : ClamAV vulnerabilities (USN-2423-1)
2014-11-27 00:00:00
SuSE 11.3 Security Update : clamav (SAT Patch Number 10016)
2014-12-06 00:00:00
openvas
openvas
Fedora Update for clamav FEDORA-2014-15434
2015-01-05 00:00:00
Fedora Update for clamav FEDORA-2014-15463
2014-11-28 00:00:00
SUSE: Security Advisory for clamav (SUSE-SU-2014:1574-1)
2015-10-13 00:00:00
debian
debian
[SECURITY] [DLA 95-1] clamav security update
2014-12-02 21:37:10
osv
osv
clamav - security update
2014-12-02 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: clamav-0.98.5-1.fc19
2014-11-27 08:37:32
[SECURITY] Fedora 21 Update: clamav-0.98.5-1.fc21
2014-12-06 10:32:13
[SECURITY] Fedora 20 Update: clamav-0.98.5-1.fc20
2014-11-22 12:39:19
securityvulns
securityvulns
ClamAV memory corruptions
2014-11-30 00:00:00
[USN-2423-1] ClamAV vulnerabilities
2014-11-30 00:00:00
suse
suse
Security update for clamav (important)
2014-12-21 19:04:40
Security update for clamav (important)
2014-12-05 21:04:59
Security update for clamav (important)
2014-12-05 10:04:48
mageia
mageia
Updated clamav packages fix security vulnerabilities
2014-11-26 13:14:01
cvelist
cvelist
CVE-2014-9050
2014-12-01 15:00:00
CVE-2013-6497
2014-12-01 15:00:00
gentoo
gentoo
Clam AntiVirus: Denial of service
2014-12-09 00:00:00
nvd
nvd
CVE-2014-9050
2014-12-01 15:59:10
CVE-2013-6497
2014-12-01 15:59:00
ubuntucve
ubuntucve
CVE-2013-6497
2013-12-31 00:00:00
CVE-2014-9050
2014-11-24 00:00:00
amazon
amazon
Low: clamav
2014-12-08 13:12:00
debiancve
debiancve
CVE-2013-6497
2014-12-01 15:59:00
CVE-2014-9050
2014-12-01 15:59:10
prion
prion
Code injection
2014-12-01 15:59:00
Heap overflow
2014-12-01 15:59:00
cve
cve
CVE-2014-9050
2014-12-01 15:59:10
CVE-2013-6497
2014-12-01 15:59:00
archlinux
archlinux
clamav: denial of service
2014-11-20 00:00:00
ubuntu
ubuntu
ClamAV vulnerability
2015-02-12 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.4 High

AI Score

Confidence

Low

0.142 Low

EPSS

Percentile

95.7%

JSON
Related for USN-2423-1
nessus14openvas15debian1osv1fedora3securityvulns2suse4mageia1cvelist2gentoo1nvd2ubuntucve2amazon1debiancve2prion2cve2archlinux1ubuntu1