Description
ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | clamav | 0.92.1~dfsg2-1 | — |
| Debian 13 | clamav | 0.92.1~dfsg2-1 | — |
| Debian 12 | clamav | 0.92.1~dfsg2-1 | — |
References
- MDVSA-2008:088 vendor-advisory
- clamav-arj-unspecified-dos(41822) vdb-entry
- FEDORA-2008-3900 vendor-advisory
- 20080415 clamav: Endless loop / hang with crafter arj, CVE-2008-1387 mailing-list
- GLSA-200805-19 vendor-advisory
- APPLE-SA-2008-09-15 vendor-advisory
- https://www.clamav.net/bugzilla/show_bug.cgi?id=897
- http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html
- http://int21.de/cve/CVE-2008-1387-clamav.html
- 29891 third-party-advisory
- TA08-260A third-party-advisory
- 28784 vdb-entry
- ADV-2008-2584 vdb-entry
- 31882 third-party-advisory
- 29975 third-party-advisory
- http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html
- 29863 third-party-advisory
- 30328 third-party-advisory
- FEDORA-2008-3420 vendor-advisory
- 28782 vdb-entry
- 30253 third-party-advisory
- 31576 third-party-advisory
- ADV-2008-1227 vdb-entry
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/
- SUSE-SA:2008:024 vendor-advisory
- FEDORA-2008-3358 vendor-advisory
- http://kolab.org/security/kolab-vendor-notice-20.txt