Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 569
Alerts This Week
Warning Icon 1 569

Ubuntu 18.04: USN-3722-5 Moderate: ClamAV DoS Regression Fix

ubuntu
Calendar Grey September 18, 2018
Dist Ubuntu Esm H88
Corrects a flaw in ClamAV that led to problems in Ubuntu versions 14.04, 16.04, and 18.04 concerning denial of service vulnerabilities.
USN-3722-1 introduced a regression in ClamAV.

Summary

USN-3722-1 introduced a regression in ClamAV.

Software Description:

- clamav: Anti-virus utility for Unix

Details:

USN-3722-1 fixed vulnerabilities in ClamAV. The new package introduced an

issue which caused dpkg-reconfigure to enter an infinite loop. This update

fixes the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that ClamAV incorrectly handled parsing certain HWP

files. A remote attacker could use this issue to cause ClamAV to hang,

resulting in a denial of service. (CVE-2018-0360)

It was discovered that ClamAV incorrectly handled parsing certain PDF

files. A remote attacker could use this issue to cause ClamAV to hang,

resulting in a denial of service. (CVE-2018-0361)

Topics%20covered

Topics Covered

security advisory denial of service ubuntu clamav regression fix

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  clamav                          0.100.1+dfsg-1ubuntu0.18.04.3

Ubuntu 16.04 LTS:
  clamav                          0.100.1+dfsg-1ubuntu0.16.04.3

Ubuntu 14.04 LTS:
  clamav                          0.100.1+dfsg-1ubuntu0.14.04.4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3722-5

https://ubuntu.com/security/notices/USN-3722-1

https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1792051

Severity
medium
Lowest
Low
Medium
High
Critical

September 18, 2018

Topics%20covered

Topics Covered

security advisory denial of service ubuntu clamav regression fix

Package Information

https://launchpad.net/ubuntu/+source/clamav/0.100.1+dfsg-1ubuntu0.18.04.3
https://launchpad.net/ubuntu/+source/clamav/0.100.1+dfsg-1ubuntu0.16.04.3
https://launchpad.net/ubuntu/+source/clamav/0.100.1+dfsg-1ubuntu0.14.04.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.