Summary
USN-4918-1 fixed vulnerabilities in ClamAV. The updated package could
fail to properly scan in some situations. This update fixes
the problem.
Original advisory details:
It was discovered that ClamAV incorrectly handled parsing Excel documents.
A remote attacker could possibly use this issue to cause ClamAV to hang,
resulting in a denial of service. (CVE-2021-1252)
It was discovered that ClamAV incorrectly handled parsing PDF documents. A
remote attacker could possibly use this issue to cause ClamAV to crash,
resulting in a denial of service. (CVE-2021-1404)
It was discovered that ClamAV incorrectly handled parsing email. A remote
attacker could possibly use this issue to cause ClamAV to crash, resulting
in a denial of service. (CVE-2021-1405)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | clamav | 0.103.2+dfsg-0ubuntu0.18.04.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | clamav | 0.103.2+dfsg-0ubuntu0.20.04.2 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | clamav | 0.103.2+dfsg-0ubuntu0.14.04.1+esm2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | clamav | 0.103.2+dfsg-0ubuntu0.16.04.1+esm1 |
References
-
report
https://launchpad.net/bugs/1926300