Lucene search
UbuntuUSN-2488-1HistoryFeb 02, 2015 - 12:00 a.m.
ClamAV vulnerability
2015-02-0200:00:00
ubuntu.com
32
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.022 Low
EPSS
Percentile
89.4%
Releases
- Ubuntu 14.10
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- clamav - Anti-virus utility for Unix
Details
Sebastian Andrzej Siewior discovered that ClamAV incorrectly handled
certain upack packer files. An attacker could possibly use this issue to
cause ClamAV to crash, resulting in a denial of service, or possibly
execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.10 | noarch | clamav | < 0.98.6+dfsg-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | clamav-daemon | < 0.98.6+dfsg-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | clamav-dbg | < 0.98.6+dfsg-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | clamav-freshclam | < 0.98.6+dfsg-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | clamav-milter | < 0.98.6+dfsg-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | libclamav-dev | < 0.98.6+dfsg-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | libclamav6 | < 0.98.6+dfsg-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | clamav | < 0.98.6+dfsg-0ubuntu0.14.04.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | clamav-daemon | < 0.98.6+dfsg-0ubuntu0.14.04.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | clamav-dbg | < 0.98.6+dfsg-0ubuntu0.14.04.1 | UNKNOWN |
References
Related
openvas
openvas
Fedora Update for clamav FEDORA-2015-1461
2015-01-31 00:00:00
Fedora Update for clamav FEDORA-2015-1437
2015-01-31 00:00:00
Ubuntu: Security Advisory (USN-2488-1)
2015-02-03 00:00:00
amazon
amazon
Medium: clamav
2015-03-04 15:52:00
debiancve
debiancve
CVE-2014-9328
2015-02-03 16:59:02
prion
prion
Heap overflow
2015-02-03 16:59:00
nessus
nessus
Mandriva Linux Security Advisory : clamav (MDVSA-2015:042)
2015-02-11 00:00:00
Ubuntu 14.04 LTS : ClamAV vulnerability (USN-2488-1)
2015-02-03 00:00:00
Amazon Linux AMI : clamav (ALAS-2015-486)
2015-03-09 00:00:00
ubuntucve
ubuntucve
CVE-2014-9328
2015-01-29 00:00:00
archlinux
archlinux
clamav: arbitrary code execution
2015-02-06 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: clamav-0.98.6-1.fc21
2015-01-30 23:56:42
[SECURITY] Fedora 20 Update: clamav-0.98.6-1.fc20
2015-01-30 23:53:55
securityvulns
securityvulns
ClamAV memory corruptions
2015-02-11 00:00:00
[ MDVSA-2015:042 ] clamav
2015-02-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package clamav version 0.98.6-alt1
2015-01-28 00:00:00
Security fix for the ALT Linux 9 package clamav version 0.98.6-alt1
2015-01-28 00:00:00
Security fix for the ALT Linux 8 package clamav version 0.98.6-alt1
2015-01-28 00:00:00
cvelist
cvelist
CVE-2014-9328
2015-02-03 16:00:00
mageia
mageia
Updated clamav packages fix security vulnerabilities
2015-02-10 00:44:14
nvd
nvd
CVE-2014-9328
2015-02-03 16:59:02
cve
cve
CVE-2014-9328
2015-02-03 16:59:02
ubuntu
ubuntu
ClamAV vulnerability
2015-02-12 00:00:00
suse
suse
Security update for clamav (important)
2015-02-17 03:04:56
Security update for clamav (important)
2015-02-13 16:05:18
gentoo
gentoo
ClamAV: Multiple vulnerabilities
2015-12-30 00:00:00
debian
debian
[SECURITY] [DLA 233-1] clamav security and upstream version update
2015-05-29 03:57:22
osv
osv
clamav - security update
2015-05-28 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.022 Low
EPSS
Percentile
89.4%
Related for USN-2488-1