Vulnerability in ClamAV - Denial of Service
Summary
DLA-1105-1: clamav - security update. Affects clamav versions < 0.99.2+dfsg-0+deb7u3. Fixed in 0.99.2+dfsg-0+deb7u3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
ClamAV is an open-source antivirus software package that is commonly used to detect and remove malware from systems. It provides a command-line scanner, a database updater, and a scalable multi-threaded daemon. ClamAV is vulnerable to multiple issues that can lead to denial of service when processing untrusted content.
Vulnerability Detail
The vulnerability in ClamAV is caused by two separate issues:
-
CVE-2017-6418: This vulnerability is an out-of-bounds read in the libclamav/message.c file. It can be exploited by remote attackers to cause a denial of service by sending a crafted e-mail message.
-
CVE-2017-6420: This vulnerability is a use-after-free in the wwunpack function in libclamav/wwunpack.c. Remote attackers can exploit this vulnerability by sending a crafted PE file with WWPack compression, leading to a denial of service.
These vulnerabilities can be exploited remotely and may result in the system becoming unresponsive or crashing.
How To Fix
Minimum fixed version
0.99.2+dfsg-0+deb7u3
This is the first release that contains the fix.
sudo apt-get install --only-upgrade clamavTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for these vulnerabilities. It is recommended to apply the security update as soon as possible.
Conclusion
ClamAV is vulnerable to multiple denial of service vulnerabilities. To mitigate these risks, it is crucial to upgrade to the latest version of ClamAV. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for clamav →
FAQ
ClamAV is an open-source antivirus software package used to detect and remove malware from systems.
These vulnerabilities can be exploited remotely and may result in a denial of service, causing the system to become unresponsive or crash.
To fix these vulnerabilities, it is recommended to upgrade the ClamAV package to version 0.99.2+dfsg-0+deb7u3 or later.
There are no known workarounds for these vulnerabilities. It is recommended to apply the security update as soon as possible.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, at https://wiki.debian.org/LTS.
Related vulnerabilities
Recent vulnerabilities recorded for clamav.
