Summary
It was discovered that ClamAV incorrectly handled parsing certain HWP
files. A remote attacker could use this issue to cause ClamAV to hang,
resulting in a denial of service. (CVE-2018-0360)
It was discovered that ClamAV incorrectly handled parsing certain PDF
files. A remote attacker could use this issue to cause ClamAV to hang,
resulting in a denial of service. (CVE-2018-0361)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | clamav | 0.100.1+dfsg-1ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | clamav | 0.100.1+dfsg-1ubuntu0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | clamav | 0.100.1+dfsg-1ubuntu0.18.04.1 |
Vulnerabilities 2
-
Unscored —
ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor fi…
-
Unscored —
ClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to parse a relatively sma…