Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Gentoo: 200812-21 High: ClamAV Remote Code Exec and DoS Risk

gentoo
Calendar Grey December 23, 2008
Scroller Gentoo
Uncover critical vulnerabilities in ClamAV posing risks of remote code execution and denial-of-service attacks on Gentoo Linux systems.
Two vulnerabilities in ClamAV may allow for the remote execution of arbitrary code or a Denial of Service.

Summary

Gentoo Linux Security Advisory GLSA 200812-21 https://security.gentoo.org/ Severity: High Title: ClamAV: Multiple vulnerabilities Date: December 23, 2008 Bugs: #245450, #249833 ID: 200812-21

Synopsis ======= Two vulnerabilities in ClamAV may allow for the remote execution of arbitrary code or a Denial of Service.
Background ========= Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-antivirus/clamav < 0.94.2 >= 0.94.2
========== Moritz Jodeit reported an off-by-one error within the get_unicode_name() function in libclamav/vba_e...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory high severity gentoo remote execution arbitrary code dos attack clamav

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo remote execution arbitrary code dos attack clamav

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround