Summary
It was discovered that ClamAV incorrectly handled parsing certain OLE2
files. A remote attacker could possibly use this issue to cause ClamAV to
crash, resulting in a denial of service. (CVE-2024-20290)
Amit Schendel discovered that the ClamAV ClamD service incorrectly handled
the VirusEvent feature. An attacker able to connect to ClamD could possibly
use this issue to execute arbitrary code. (CVE-2024-20328)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 23.10 | clamav | 1.0.5+dfsg-0ubuntu0.23.10.1 |