Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 494
Alerts This Week
Warning Icon 1 494

Ubuntu 12.04 ESM USN-3722-2: Critical ClamAV Denial of Service Issue

ubuntu
Calendar Grey July 25, 2018
Dist Ubuntu Esm H88
The latest Ubuntu Security Notice USN-3723-1 highlights vulnerabilities in OpenSSH that could lead to security breaches through improperly configured servers.
ClamAV could be made to hang if it opened a specially crafted file.

Summary

ClamAV could be made to hang if it opened a specially crafted file.

Software Description:

- clamav: Anti-virus utility for Unix

Details:

USN-3722-1 fixed a vulnerability in ClamAV. This update provides

the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 It was discovered that ClamAV incorrectly handled parsing certain HWP

 files. A remote attacker could use this issue to cause ClamAV to hang,

 resulting in a denial of service. (CVE-2018-0360)

 It was discovered that ClamAV incorrectly handled parsing certain PDF

 files. A remote attacker could use this issue to cause ClamAV to hang,

 resulting in a denial of service. (CVE-2018-0361)

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu critical update software issue ClamAV

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  clamav                          0.100.1+dfsg-1ubuntu0.12.04.1

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3722-2

  https://ubuntu.com/security/notices/USN-3722-1

  CVE-2018-0360, CVE-2018-0361

Severity
critical
Lowest
Low
Medium
High
Critical

July 25, 2018

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu critical update software issue ClamAV

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.