Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

Gentoo: 200812-21 High: ClamAV Remote Code Exec and DoS Risk

gentoo
Calendar Grey December 23, 2008
Dist Gentoo Esm H88
Uncover critical vulnerabilities in ClamAV posing risks of remote code execution and denial-of-service attacks on Gentoo Linux systems.
Two vulnerabilities in ClamAV may allow for the remote execution of arbitrary code or a Denial of Service.

Summary

Gentoo Linux Security Advisory GLSA 200812-21 https://security.gentoo.org/ Severity: High Title: ClamAV: Multiple vulnerabilities Date: December 23, 2008 Bugs: #245450, #249833 ID: 200812-21

Synopsis ======= Two vulnerabilities in ClamAV may allow for the remote execution of arbitrary code or a Denial of Service.
Background ========= Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-antivirus/clamav < 0.94.2 >= 0.94.2
========== Moritz Jodeit reported an off-by-one error within the get_unicode_name() function in libclamav/vba_e...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns


Warning: Undefined array key "advisory_info" in /var/www/www.linuxsecurity.com-443/html/tmp/regularlabs/custom_php/3462187_4c9dbbdde36eef04251a4ced7eac4df9 on line 11

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Related News

Your message here