Ubuntu 12.04 ESM: USN-3393-2 Critical: ClamAV Denial Of Service
ubuntu
August 17, 2017
Several security issues were fixed in ClamAV.
Summary
Several security issues were fixed in ClamAV.
Software Description:
- clamav: Anti-virus utility for Unix
Details:
USN-3393-1 fixed several vulnerabilities in ClamAV. This update
provides the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
It was discovered that ClamAV incorrectly handled parsing certain
e- mail messages. A remote attacker could possibly use this issue to
cause ClamAV to crash, resulting in a denial of service.
(CVE-2017-6418)
It was discovered that ClamAV incorrectly handled certain malformed
CHM files. A remote attacker could use this issue to cause ClamAV to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 14.04 LTS. In the default
installation, attackers would be isolated by the ClamAV AppArmor
profile. (CVE-2017-6419)
It was discovered that ClamAV incorrectly handled parsing certain PE
files with WWPack compression....
Topics Covered
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM: clamav 0.99.2+addedllvm-0ubuntu0.12.04.2 In general, a standard system update will make all the necessary changes.
References
https://ubuntu.com/security/notices/USN-3393-2
https://ubuntu.com/security/notices/USN-3393-1
CVE-2017-6418, CVE-2017-6419, CVE-2017-6420
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
August 17, 2017
Topics Covered
Package Information
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!