Summary
It was discovered that ClamAV incorrectly handled parsing certain PDF
files. A remote attacker could use this issue to cause ClamAV to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2018-0202)
Hanno Böck discovered that ClamAV incorrectly handled parsing certain XAR
files. A remote attacker could use this issue to cause ClamAV to crash,
resulting in a denial of service. (CVE-2018-1000085)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | clamav | 0.99.4+addedllvm-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | clamav | 0.99.4+addedllvm-0ubuntu0.16.04.1 |
Vulnerabilities 2
-
Unscored —CVE-2018-0202 Public exploit
clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause…
-
Unscored —
ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xar_hash_…