Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | clamav | 0.101.4+dfsg-0+deb8u1 |
Vulnerabilities 2
-
Critical 9.8
out-of-bounds write when there are many bzip2 selectors
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
-
High 7.5
ClamAV Zip Bomb Vulnerability
ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service condition by sending crafted messages to an affected system.