Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Ubuntu 14.04 ESM: USN-4230-2 Critical: ClamAV Denial Of Service

ubuntu
Calendar Grey January 23, 2020
Dist Ubuntu Esm H88
A vulnerability in ClamAV may cause system crashes upon accessing specially constructed files. The Ubuntu security notice outlines necessary patches and updates.
ClamAV could be made to crash if it opened a specially crafted file.

Summary

ClamAV could be made to crash if it opened a specially crafted file.

Software Description:

- clamav: Anti-virus utility for Unix

Details:

USN-4230-1 fixed a vulnerability in ClamAV. This update provides

the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that ClamAV incorrectly handled certain MIME messages. A

remote attacker could possibly use this issue to cause ClamAV to crash,

resulting in a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu clamav

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  clamav                          0.102.1+dfsg-0ubuntu0.14.04.1+esm1

Ubuntu 12.04 ESM:
  clamav                          0.102.1+dfsg-0ubuntu0.12.04.1

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References

https://ubuntu.com/security/notices/USN-4230-2

https://ubuntu.com/security/notices/USN-4230-1

CVE-2019-15961

Severity
critical
Lowest
Low
Medium
High
Critical

January 23, 2020

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu clamav

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here