USN-4918-1: ClamAV vulnerabilities

🗓️ 19 Apr 2021 17:52:28Reported by UbuntuType

ubuntu🔗 ubuntu.com👁 129 Views

ClamAV vulnerabilities in Ubuntu 20.10, 20.04 LTS, 18.04 ESM, 16.04 ESM on handling Excel, PDF, and email parsing leading to denial of servic

Reporter	Title	Published	Views	Family All 120
ALT Linux	Security fix for the ALT Linux 9 package clamav version 0.103.2-alt1	12 Apr 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package clamav version 0.103.2-alt1	10 Apr 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package clamav version 0.103.2-alt1	14 Apr 202100:00	–	altlinux
FreeBSD	clamav -- Multiple vulnerabilites	7 Apr 202100:00	–	freebsd
AlpineLinux	CVE-2021-1252	8 Apr 202104:25	–	alpinelinux
AlpineLinux	CVE-2021-1404	8 Apr 202104:30	–	alpinelinux
AlpineLinux	CVE-2021-1405	8 Apr 202104:30	–	alpinelinux
BDU FSTEC	The vulnerability of the syntax analysis module in the email analysis part of the ClamAV antivirus program allows a hacker to trigger a service failure.	27 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the module for syntactic analysis of PDF files in the ClamAV antivirus program allows a hacker to trigger a service failure.	27 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Macro Analysis module in the ClamAV antivirus software package allows a hacker to trigger a service failure.	27 Apr 202100:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	16.04	any	clamav	0.103.2+dfsg-0ubuntu0.16.04.1	clamav_0.103.2+dfsg-0ubuntu0.16.04.1_any.deb
Ubuntu	18.04	any	clamav	0.103.2+dfsg-0ubuntu0.18.04.1	clamav_0.103.2+dfsg-0ubuntu0.18.04.1_any.deb
Ubuntu	20.04	any	clamav	0.103.2+dfsg-0ubuntu0.20.04.1	clamav_0.103.2+dfsg-0ubuntu0.20.04.1_any.deb
Ubuntu	20.10	any	clamav	0.103.2+dfsg-0ubuntu0.20.10.1	clamav_0.103.2+dfsg-0ubuntu0.20.10.1_any.deb

19 Apr 2021 17:52Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

CVSS 27.8

EPSS0.03155

SSVC