Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Gentoo: GLSA-202310-04 Moderate: ClamAV Denial of Service Risk

gentoo
Calendar Grey August 10, 2007
Scroller Gentoo
Critical vulnerability in ClamAV results in Denial of Service on Gentoo systems. Immediate upgrade is advised to maintain security.
A vulnerability has been discovered in ClamAV, allowing for a Denial of Service.

Summary

Gentoo Linux Security Advisory GLSA 200708-04 https://security.gentoo.org/ Severity: Normal Title: ClamAV: Denial of Service Date: August 09, 2007 Bugs: #185013 ID: 200708-04

Synopsis ======= A vulnerability has been discovered in ClamAV, allowing for a Denial of Service.
Background ========= ClamAV is a GPL virus scanner.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-antivirus/clamav < 0.91 >= 0.91
========== Metaeye Security Group reported a NULL pointer dereference in ClamAV when processing RAR archives.
Impact ===== A remote attacker could send a specially crafted RAR archive to the clamd daemon, resulting in a crash and a Denial of Service.
Wor...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround