ClamAV - Security Update (CVE-2017-6419, CVE-2017-11423)
Summary
DLA-1279-1: clamav - security update. Affects clamav versions < 0.99.2+dfsg-0+deb7u5. Fixed in 0.99.2+dfsg-0+deb7u5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
ClamAV is an open-source antivirus engine designed for detecting malicious software. It is commonly used to scan files and emails for potential threats. The ClamAV package for Debian 7 Wheezy is vulnerable to two security issues, namely CVE-2017-6419 and CVE-2017-11423. These vulnerabilities can be exploited to cause denial of service or potentially have other unspecified impacts by using crafted files. The vulnerabilities involve a heap-based buffer overflow and a stack-based buffer over-read, both of which can lead to application crashes.
Vulnerability Detail
The first vulnerability, CVE-2017-6419, is a heap-based buffer overflow that can be triggered by processing a specially crafted file. This can result in a denial of service or potentially allow an attacker to execute arbitrary code. The second vulnerability, CVE-2017-11423, is a stack-based buffer over-read that can also be triggered by processing a crafted file. This can lead to a crash of the ClamAV application. Both vulnerabilities have been fixed in version 0.99.2+dfsg-0+deb7u5 of the ClamAV package for Debian 7 Wheezy.
How To Fix
Minimum fixed version
0.99.2+dfsg-0+deb7u5
This is the first release that contains the fix.
sudo apt-get install --only-upgrade clamavTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The ClamAV package for Debian 7 Wheezy is vulnerable to two security issues that can result in denial of service or application crashes. It is recommended to upgrade the ClamAV package to version 0.99.2+dfsg-0+deb7u5 or later to fix these vulnerabilities. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for clamav →
FAQ
ClamAV is an open-source antivirus engine used for detecting malicious software.
CVE-2017-6419 is a heap-based buffer overflow vulnerability in ClamAV that can be triggered by processing a specially crafted file.
CVE-2017-11423 is a stack-based buffer over-read vulnerability in ClamAV that can be triggered by processing a crafted file.
The vulnerabilities can lead to denial of service or application crashes, and in the case of CVE-2017-6419, it may also allow an attacker to execute arbitrary code.
To fix the vulnerabilities, you should upgrade the ClamAV package to version 0.99.2+dfsg-0+deb7u5 or later.
Related vulnerabilities
Recent vulnerabilities recorded for clamav.
