Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 12.04 ESM: USN-3722-6 Moderate ClamAV Denial Of Service

ubuntu
Calendar Grey September 18, 2018
Dist Ubuntu Esm H88
Patch available for ClamAV security issues outlined in USN-3722-1, impacting Ubuntu 12.04 ESM. Protect your system immediately.
USN-3722-1 introduced a regression in ClamAV.

Summary

USN-3722-1 introduced a regression in ClamAV.

Software Description:

- clamav: Anti-virus utility for Unix

Details:

USN-3722-1 fixed vulnerabilities in ClamAV. The new package introduced

an issue which caused dpkg-reconfigure to enter an infinite loop. This

update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

 It was discovered that ClamAV incorrectly handled parsing certain HWP

 files. A remote attacker could use this issue to cause ClamAV to hang,

 resulting in a denial of service. (CVE-2018-0360)

 It was discovered that ClamAV incorrectly handled parsing certain PDF

 files. A remote attacker could use this issue to cause ClamAV to hang,

 resulting in a denial of service. (CVE-2018-0361)

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu software fix ClamAV

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  clamav                          0.100.1+dfsg-1ubuntu0.12.04.4

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3722-6

  https://ubuntu.com/security/notices/USN-3722-1

  https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1792051

September 18, 2018

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu software fix ClamAV

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.