Skip to content
OpenAdvisories
Unscored USN-3789-1 1 CVE

clamav vulnerability

Published Oct 11, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that ClamAV incorrectly handled unpacking MEW
executables. A remote attacker could possibly use this issue to cause
ClamAV to crash, resulting in a denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS clamav 0.100.2+dfsg-1ubuntu0.14.04.1
Ubuntu · 16.04 LTS 16.04:LTS clamav 0.100.2+dfsg-1ubuntu0.16.04.1
Ubuntu · 18.04 LTS 18.04:LTS clamav 0.100.2+dfsg-1ubuntu0.18.04.1

Vulnerabilities 1

  • Unscored —
    CVE-2018-15378

    Clam AntiVirus unmew11() Denial of Service Vulnerability

    A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due to an error related to the MEW unpacker within the "unmew11()" function (libclamav/mew.c), which can be exploite…

    Cisco ClamAV clamav clamav Network devices Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2018-15378