Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Ubuntu 12.04 LTS: USN-1482-2 Critical Trojan Detection Flaw

ubuntu
Calendar Grey June 20, 2012
Scroller Ubuntu
ClamAV falsely identified malicious content in specifically designed documents. Ensure your Ubuntu OS is updated to fix the problem.
ClamAV could improperly detect malware if it opened a specially crafted file.

Summary

ClamAV could improperly detect malware if it opened a specially crafted file.

Software Description:

- clamav: Anti-virus utility for Unix

Details:

USN-1482-1 fixed vulnerabilities in ClamAV. The updated packages could fail

to install in certain situations. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that ClamAV incorrectly handled certain malformed TAR

archives. A remote attacker could create a specially-crafted TAR file

containing malware that could escape being detected. (CVE-2012-1457,

CVE-2012-1459)

It was discovered that ClamAV incorrectly handled certain malformed CHM

files. A remote attacker could create a specially-crafted CHM file

containing malware that could escape being detected. (CVE-2012-1458)

Topics%20covered

Topics Covered

security advisory critical ubuntu clamav malware issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  clamav                          0.97.5+dfsg-1ubuntu0.12.04.2
  clamav-daemon                   0.97.5+dfsg-1ubuntu0.12.04.2
  libclamav6                      0.97.5+dfsg-1ubuntu0.12.04.2

Ubuntu 11.10:
  clamav                          0.97.5+dfsg-1ubuntu0.11.10.2
  clamav-daemon                   0.97.5+dfsg-1ubuntu0.11.10.2
  libclamav6                      0.97.5+dfsg-1ubuntu0.11.10.2

Ubuntu 11.04:
  clamav                          0.97.5+dfsg-1ubuntu0.11.04.2
  clamav-daemon                   0.97.5+dfsg-1ubuntu0.11.04.2
  libclamav6                      0.97.5+dfsg-1ubuntu0.11.04.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1482-2

https://ubuntu.com/security/notices/USN-1482-1

https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1015337

Severity
critical
Lowest
Low
Medium
High
Critical

June 20, 2012

Topics%20covered

Topics Covered

security advisory critical ubuntu clamav malware issue

Package Information

https://launchpad.net/ubuntu/+source/clamav/0.97.5+dfsg-1ubuntu0.12.04.2
https://launchpad.net/ubuntu/+source/clamav/0.97.5+dfsg-1ubuntu0.11.10.2
https://launchpad.net/ubuntu/+source/clamav/0.97.5+dfsg-1ubuntu0.11.04.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.