Skip to content
OpenAdvisories
Unscored USN-4918-3 0 CVEs

clamav regression

Published May 3, 2021 · Updated Jun 29, 2026

Summary

USN-4918-1 fixed vulnerabilities in ClamAV. The updated package could
fail to properly scan in some situations. This update fixes
the problem.

Original advisory details:

It was discovered that ClamAV incorrectly handled parsing Excel documents.
A remote attacker could possibly use this issue to cause ClamAV to hang,
resulting in a denial of service. (CVE-2021-1252)

It was discovered that ClamAV incorrectly handled parsing PDF documents. A
remote attacker could possibly use this issue to cause ClamAV to crash,
resulting in a denial of service. (CVE-2021-1404)

It was discovered that ClamAV incorrectly handled parsing email. A remote
attacker could possibly use this issue to cause ClamAV to crash, resulting
in a denial of service. (CVE-2021-1405)

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS clamav 0.103.2+dfsg-0ubuntu0.18.04.2
Ubuntu · 20.04 LTS 20.04:LTS clamav 0.103.2+dfsg-0ubuntu0.20.04.2
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS clamav 0.103.2+dfsg-0ubuntu0.14.04.1+esm2
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS clamav 0.103.2+dfsg-0ubuntu0.16.04.1+esm1

References

  • report
    https://launchpad.net/bugs/1926300