ClamAV: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 5

• Unscored —
  CVE-2018-14679

  An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMG…

  clamav libmspack libmspack libmspack Debian Ubuntu Alpine
  Jul 28, 2018
• Unscored —
  CVE-2018-14680

  An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.

  clamav clamav libmspack libmspack Debian Ubuntu Alpine
  Jul 28, 2018
• Unscored —
  CVE-2018-14681

  An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header exte…

  clamav clamav libmspack libmspack Debian Ubuntu Alpine
  Jul 28, 2018
• Unscored —
  CVE-2018-14682

  An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() ma…

  clamav clamav libmspack libmspack Debian Ubuntu Alpine
  Jul 28, 2018
• Unscored —
  CVE-2018-15378

  Clam AntiVirus unmew11() Denial of Service Vulnerability

  A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due to an error related to the MEW unpacker within the "unmew11()" function (libclamav/mew.c), which can be exploite…

  Cisco ClamAV clamav clamav Network devices Debian Ubuntu Alpine
  Oct 15, 2018

Revision history

1. 2025-02-03 #11

   Neue Updates von SUSE aufgenommen

2. 2021-12-01 #10

   Neue Updates von SUSE aufgenommen

3. 2021-08-22 #9

   Neue Updates von SUSE aufgenommen

4. 2019-04-28 #8

   Neue Updates von SUSE aufgenommen

5. 2019-04-10 #7

   Neue Updates von GENTOO aufgenommen

6. 2018-11-05 #6

   Added references

7. 2018-10-31 #5

   Added references

8. 2018-10-30 #4

   New remediations available

9. 2018-10-25 #3

   New remediations available

10. 2018-10-21 #2

    New remediations available

11. 2018-10-11 #1

    Initial Release

References

• ClamAV Release Notes vom 2018-10-11
  https://blog.clamav.net/2018/10/clamav-01002-has-been-released.html
• SUSE Security Update SUSE-SU-2018:3250-1 vom 2018-10-20
  https://www.suse.com/support/update/announcement/2018/suse-su-20183250-1.html
• SUSE Security Update SUSE-SU-2018:3441-1 vom 2018-10-26
  https://www.suse.com/support/update/announcement/2018/suse-su-20183441-1.html
• SUSE Security Update SUSE-SU-2018:3436-1 vom 2018-10-26
  https://www.suse.com/support/update/announcement/2018/suse-su-20183436-1.html
• Red Hat Security Advisory RHSA-2018:3327 vom 2018-10-31
  https://access.redhat.com/errata/RHSA-2018:3327
• GENTOO Security Advisory GLSA201904-12 vom 2019-04-11
  https://security.gentoo.org/glsa/201904-12
• SUSE Security Update SUSE-SU-2018:3436-2 vom 2019-04-28
  https://www.suse.com/support/update/announcement/2019/suse-su-20183436-2.html
• SUSE Security Update SUSE-SU-2021:2802-1 vom 2021-08-20
  https://lists.suse.com/pipermail/sle-security-updates/2021-August/009322.html
• SUSE Security Update SUSE-SU-2021:14850-1 vom 2021-12-01
  https://lists.suse.com/pipermail/sle-security-updates/2021-December/009806.html
• SUSE Security Update SUSE-SU-2021:3853-1 vom 2021-12-01
  https://lists.suse.com/pipermail/sle-security-updates/2021-December/009792.html
• SUSE Security Update SUSE-SU-2021:3859-1 vom 2021-12-01
  https://lists.suse.com/pipermail/sle-security-updates/2021-December/009804.html
• SUSE Security Update SUSE-SU-2025:0327-1 vom 2025-02-03
  https://lists.suse.com/pipermail/sle-security-updates/2025-February/020257.html
• SUSE Security Update SUSE-SU-2025:0325-1 vom 2025-02-03
  https://lists.suse.com/pipermail/sle-security-updates/2025-February/020258.html
• SUSE Security Update SUSE-SU-2025:0328-1 vom 2025-02-03
  https://lists.suse.com/pipermail/sle-security-updates/2025-February/020256.html