ClamAV vulnerabilities

2009-04-0700:00:00

ubuntu.com

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

Low

0.108 Low

EPSS

Percentile

95.1%

JSON

Releases

Ubuntu 8.10

Packages

clamav -

Details

It was discovered that ClamAV did not properly verify its input when
processing TAR archives. A remote attacker could send a specially crafted
TAR file and cause a denial of service via infinite loop. (CVE-2009-1270)

It was discovered that ClamAV did not properly validate Portable Executable
(PE) files. A remote attacker could send a crafted PE file and cause a
denial of service (divide by zero). (CVE-2008-6680)

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchlibclamav5< 0.94.dfsg.2-1ubuntu0.2UNKNOWN
Ubuntu8.10noarchclamav< 0.94.dfsg.2-1ubuntu0.2UNKNOWN
Ubuntu8.10noarchclamav< daemon-0.94.dfsg.2-1ubuntu0.2UNKNOWN
Ubuntu8.10noarchclamav< dbg-0.94.dfsg.2-1ubuntu0.2UNKNOWN
Ubuntu8.10noarchclamav< freshclam-0.94.dfsg.2-1ubuntu0.2UNKNOWN
Ubuntu8.10noarchclamav< milter-0.94.dfsg.2-1ubuntu0.2UNKNOWN
Ubuntu8.10noarchlibclamav-dev< 0.94.dfsg.2-1ubuntu0.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.10	noarch	libclamav5	< 0.94.dfsg.2-1ubuntu0.2	UNKNOWN
Ubuntu	8.10	noarch	clamav	< 0.94.dfsg.2-1ubuntu0.2	UNKNOWN
Ubuntu	8.10	noarch	clamav	< daemon-0.94.dfsg.2-1ubuntu0.2	UNKNOWN
Ubuntu	8.10	noarch	clamav	< dbg-0.94.dfsg.2-1ubuntu0.2	UNKNOWN
Ubuntu	8.10	noarch	clamav	< freshclam-0.94.dfsg.2-1ubuntu0.2	UNKNOWN
Ubuntu	8.10	noarch	clamav	< milter-0.94.dfsg.2-1ubuntu0.2	UNKNOWN
Ubuntu	8.10	noarch	libclamav-dev	< 0.94.dfsg.2-1ubuntu0.2	UNKNOWN