Multiple vulnerabilities have been discovered in ClamAV, the worst of which could lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 1.4.1 | >= 1.4.1 |
ClamAV is a GPL virus scanner.
Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-1.4.1"
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.103.7 | >= 0.103.7 |
ClamAV is a GPL virus scanner.
Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.103.7"
A vulnerability in ClamAV could lead to a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.103.2 | >= 0.103.2 |
ClamAV is a GPL virus scanner.
A vulnerability has been discovered in ClamAV. Please review the CVE identifier referenced below for details.
A remote attacker could cause ClamAV to scan a specially crafted file, possibly resulting a Denial of Service condition.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.103.2"
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.102.4 | >= 0.102.4 |
ClamAV is a GPL virus scanner.
Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.102.4"
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.102.2 | >= 0.102.2 |
ClamAV is a GPL virus scanner.
Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details.
A remote attacker could cause ClamAV to scan a specially crafted file, possibly resulting in a Denial of Service condition.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.102.2"
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.101.2 | >= 0.101.2 |
ClamAV is a GPL virus scanner.
Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.101.2"
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.99.4 | >= 0.99.4 |
ClamAV is a GPL virus scanner.
Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details.
A remote attacker, through multiple vectors, could execute arbitrary code, cause a Denial of Service condition, or have other unspecified impacts.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.99.4"
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.99.3 | >= 0.99.3 |
ClamAV is a GPL virus scanner.
Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details.
A remote attacker could cause ClamAV to scan a specially crafted file, possibly resulting in execution of arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.99.3"
Multiple vulnerabilities have been found in ClamAV, possibly resulting in Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.98.7 | >= 0.98.7 |
ClamAV is a GPL virus scanner.
Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details.
A remote attacker could cause ClamAV to scan a specially crafted file, possibly resulting in a Denial of Service condition or other unspecified impact.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.98.7"
A vulnerability in Clam AntiVirus can lead to a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.98.5 | >= 0.98.5 |
Clam AntiVirus is an open source (GPL) anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
A heap-based buffer overflow exists in the cli_scanpe function in libclamav/pe.c in ClamAV.
A remote attacker could possibly cause a Denial of Service condition via a specially crafted file.
There is no known workaround at this time.
All Clam AntiVirus users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.98.5"
Multiple vulnerabilities have been found in ClamAV, the worst of which could lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.98 | >= 0.98 |
Clam AntiVirus (ClamAV) is an anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details.
A remote attacker could send a specially crafted file, leading to arbitrary code execution or a Denial of Service condition.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.98"
Multiple vulnerabilities were found in Clam AntiVirus, the most severe of which may allow the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.97.3 | >= 0.97.3 |
Clam AntiVirus (short: ClamAV) is an anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
Multiple vulnerabilities have been discovered in Clam AntiVirus. Please review the CVE identifiers referenced below for details.
An unauthenticated remote attacker may execute arbitrary code with the privileges of the Clam AntiVirus process or cause a Denial of Service by causing an affected user or system to scan a crafted file.
There is no known workaround at this time.
All Clam AntiVirus users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.97.3"
Multiple vulnerabilities have been reported in Clam AntiVirus.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.96.1 | >= 0.96.1 |
Clam AntiVirus (short: ClamAV) is an anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
Multiple vulnerabilities were discovered in Clam AntiVirus. For further information, please consult the CVE entries referenced below.
A remote attacker could possibly bypass virus detection or cause a Denial of Service.
There is no known workaround at this time.
All Clam AntiVirus users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.96.1"
Multiple vulnerabilities in ClamAV allow for the remote execution of arbitrary code or Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.95.2 | >= 0.95.2 |
Clam AntiVirus (short: ClamAV) is an anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
Multiple vulnerabilities have been found in ClamAV:
A remote attacker could entice a user or automated system to process a specially crafted UPack archive or a file containing a specially crafted URL, possibly resulting in the remote execution of arbitrary code with the privileges of the user running the application, or a Denial of Service. Furthermore, a remote attacker could cause a Denial of Service by supplying a specially crafted TAR archive or PE executable to a Clam AntiVirus instance.
There is no known workaround at this time.
All Clam AntiVirus users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.95.2"
Two vulnerabilities in ClamAV may allow for the remote execution of arbitrary code or a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.94.2 | >= 0.94.2 |
Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
Moritz Jodeit reported an off-by-one error within the get_unicode_name() function in libclamav/vba_extract.c when processing VBA project files (CVE-2008-5050). Ilja van Sprundel reported an infinite recursion error within the cli_check_jpeg_exploit() function in libclamav/special.c when processing JPEG files (CVE-2008-5314).
A remote attacker could send a specially crafted VBA or JPEG file to the clamd daemon, possibly resulting in the remote execution of arbitrary code with the privileges of the user running the application or a Denial of Service.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.94.2"
Multiple vulnerabilities in ClamAV may result in a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.94 | >= 0.94 |
Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
Hanno boeck reported an error in libclamav/chmunpack.c when processing CHM files (CVE-2008-1389). Other unspecified vulnerabilities were also reported, including a NULL pointer dereference in libclamav (CVE-2008-3912), memory leaks in freshclam/manager.c (CVE-2008-3913), and file descriptor leaks in libclamav/others.c and libclamav/sis.c (CVE-2008-3914).
A remote attacker could entice a user or automated system to scan a specially crafted CHM, possibly resulting in a Denial of Service (daemon crash). The other attack vectors mentioned above could also result in a Denial of Service.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.94"
Multiple vulnerabilities in ClamAV may result in a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.93.3 | >= 0.93.3 |
Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
Damian Put has discovered an out-of-bounds memory access while processing Petite files (CVE-2008-2713, CVE-2008-3215). Also, please note that the 0.93 ClamAV branch fixes the first of the two attack vectors of CVE-2007-6595 concerning an insecure creation of temporary files vulnerability. The sigtool attack vector seems still unfixed.
A remote attacker could entice a user or automated system to scan a specially crafted Petite file, possibly resulting in a Denial of Service (daemon crash). Also, the insecure creation of temporary files vulnerability can be triggered by a local user to perform a symlink attack.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.93.3"
Multiple vulnerabilities in ClamAV may result in the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.93 | >= 0.93 |
Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
Multiple vulnerabilities have been reported:
A remote attacker could entice a user or automated system to scan a specially crafted file, possibly leading to the execution of arbitrary code with the privileges of the user running ClamAV (either a system user or the "clamav" user if clamd is compromised), or a Denial of Service.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.93"
Multiple vulnerabilities in ClamAV may result in the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.92.1 | >= 0.92.1 |
Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
An integer overflow has been reported in the "cli_scanpe()" function in file libclamav/pe.c (CVE-2008-0318). Another unspecified vulnerability has been reported in file libclamav/mew.c (CVE-2008-0728).
A remote attacker could entice a user or automated system to scan a specially crafted file, possibly leading to the execution of arbitrary code with the privileges of the user running ClamAV (either a system user or the "clamav" user if clamd is compromised).
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.92.1"
Multiple vulnerabilities have been discovered in ClamAV allowing remote execution of arbitrary code and Denial of Service attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.91.2-r1 | >= 0.91.2-r1 |
Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
iDefense reported an integer overflow vulnerability in the cli_scanpe() function when parsing Portable Executable (PE) files packed in the MEW format, that could be exploited to cause a heap-based buffer overflow (CVE-2007-6335). Toeroek Edwin reported an off-by-one error when decompressing MS-ZIP compressed CAB files (CVE-2007-6336). An unspecified vulnerability related to the bzip2 decompression algorithm has also been discovered (CVE-2007-6337).
A remote attacker could entice a user or automated system to scan a specially crafted file, possibly leading to the execution of arbitrary code with the privileges of the user running ClamAV (either a system user or the "clamav" user if clamd is compromised).
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.91.2-r1"
Vulnerabilities have been discovered in ClamAV allowing remote execution of arbitrary code and Denial of Service attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.91.2 | >= 0.91.2 |
Clam AntiVirus is an open source (GPL) anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.
Nikolaos Rangos discovered a vulnerability in ClamAV which exists because the recipient address extracted from email messages is not properly sanitized before being used in a call to "popen()" when executing sendmail (CVE-2007-4560). Also, NULL-pointer dereference errors exist within the "cli_scanrtf()" function in libclamav/rtf.c and Stefanos Stamatis discovered a NULL-pointer dereference vulnerability within the "cli_html_normalise()" function in libclamav/htmlnorm.c (CVE-2007-4510).
The unsanitized recipient address can be exploited to execute arbitrary code with the privileges of the clamav-milter process by sending an email with a specially crafted recipient address to the affected system. Also, the NULL-pointer dereference errors can be exploited to crash ClamAV. Successful exploitation of the latter vulnerability requires that clamav-milter is started with the "black hole" mode activated, which is not enabled by default.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.91.2"
A vulnerability has been discovered in ClamAV, allowing for a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.91 | >= 0.91 |
ClamAV is a GPL virus scanner.
Metaeye Security Group reported a NULL pointer dereference in ClamAV when processing RAR archives.
A remote attacker could send a specially crafted RAR archive to the clamd daemon, resulting in a crash and a Denial of Service.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.91"
ClamAV contains several vulnerabilities leading to a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.90.3 | >= 0.90.3 |
ClamAV is a GPL virus scanner.
Several vulnerabilities were discovered in ClamAV by various researchers:
A remote attacker could send a specially crafted file to the scanner, possibly triggering one of the vulnerabilities. The two buffer overflows are reported to only cause Denial of Service. This would lead to a Denial of Service by CPU consumption or a crash of the scanner. The insecure temporary file creation vulnerability could be used by a local user to access sensitive data.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.90.3"
Multiple vulnerabilities have been discovered in ClamAV allowing for the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.90.2 | >= 0.90.2 |
ClamAV is a GPL virus scanner.
iDefense Labs have reported a stack-based buffer overflow in the cab_unstore() function when processing negative values in .cab files. Multiple file descriptor leaks have also been reported in chmunpack.c, pdf.c and dblock.c when processing .chm files.
A remote attacker could send a specially crafted CHM file to the scanner, possibly resulting in the remote execution of arbitrary code with the privileges of the user running ClamAV.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.90.2"
ClamAV contains two vulnerabilities allowing a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.90 | >= 0.90 |
ClamAV is a GPL virus scanner.
An anonymous researcher discovered a file descriptor leak error in the processing of CAB archives and a lack of validation of the "id" parameter string used to create local files when parsing MIME headers.
A remote attacker can send several crafted CAB archives with a zero-length record header that will fill the available file descriptors until no other is available, which will prevent ClamAV from scanning most archives. An attacker can also send an email with specially crafted MIME headers to overwrite local files with the permissions of the user running ClamAV, such as the virus database file, which could prevent ClamAV from detecting any virus.
The first vulnerability can be prevented by refusing any file of type CAB, but there is no known workaround for the second issue.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.90"
ClamAV is vulnerable to Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.88.7 | >= 0.88.7 |
ClamAV is a GPL virus scanner.
Hendrik Weimer discovered that ClamAV fails to properly handle deeply nested MIME multipart/mixed content.
By sending a specially crafted email with deeply nested MIME multipart/mixed content an attacker could cause ClamAV to crash.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.88.7"
ClamAV is vulnerable to a heap-based buffer overflow potentially allowing remote execution of arbitrary code and a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.88.5 | >= 0.88.5 |
ClamAV is a GPL virus scanner.
Damian Put and an anonymous researcher reported a potential heap-based buffer overflow vulnerability in rebuildpe.c responsible for the rebuilding of an unpacked PE file, and a possible crash in chmunpack.c in the CHM unpacker.
By sending a malicious attachment to a mail server running ClamAV, or providing a malicious file to ClamAV through any other method, a remote attacker could cause a Denial of Service and potentially the execution of arbitrary code with the permissions of the user running ClamAV.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.88.5"
ClamAV is vulnerable to a heap-based buffer overflow resulting in a Denial of Service and potentially remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.88.4 | >= 0.88.4 |
ClamAV is a GPL virus scanner.
Damian Put has discovered a boundary error in the pefromupx() function used by the UPX extraction module, which unpacks PE Windows executable files. Both the "clamscan" command-line utility and the "clamd" daemon are affected.
By sending a malicious attachment to a mail server running ClamAV, a remote attacker can cause a Denial of Service and potentially the execution of arbitrary code with the permissions of the user running ClamAV.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.88.4"
Freshclam is vulnerable to a buffer overflow that could lead to execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.88.2 | >= 0.88.2 |
ClamAV is a GPL virus scanner. Freshclam is a utility to download virus signature updates.
Ulf Harnhammar and an anonymous German researcher discovered that Freshclam fails to check the size of the header data returned by a webserver.
By enticing a user to connect to a malicious webserver an attacker could cause the execution of arbitrary code.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.88.2"
ClamAV contains multiple vulnerabilities that could lead to remote execution of arbitrary code or cause an application crash.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.88.1 | >= 0.88.1 |
ClamAV is a GPL virus scanner.
ClamAV contains format string vulnerabilities in the logging code (CVE-2006-1615). Furthermore Damian Put discovered an integer overflow in ClamAV's PE header parser (CVE-2006-1614) and David Luyer discovered that ClamAV can be tricked into performing an invalid memory access (CVE-2006-1630).
By sending a malicious attachment to a mail server running ClamAV, a remote attacker could cause a Denial of Service or the execution of arbitrary code. Note that the overflow in the PE header parser is only exploitable when the ArchiveMaxFileSize option is disabled.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.88.1"
ClamAV is vulnerable to a buffer overflow which may lead to remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.88 | >= 0.88 |
ClamAV is a GPL virus scanner.
Zero Day Initiative (ZDI) reported a heap buffer overflow vulnerability. The vulnerability is due to an incorrect boundary check of the user-supplied data prior to copying it to an insufficiently sized memory buffer. The flaw occurs when the application attempts to handle compressed UPX files.
For example by sending a maliciously crafted UPX file into a mail server that is integrated with ClamAV, a remote attacker's supplied code could be executed with escalated privileges.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.88"
ClamAV has many security flaws which make it vulnerable to remote execution of arbitrary code and a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.87.1 | >= 0.87.1 |
ClamAV is a GPL anti-virus toolkit, designed for integration with mail servers to perform attachment scanning. ClamAV also provides a command line scanner and a tool for fetching updates of the virus database.
ClamAV has multiple security flaws: a boundary check was performed incorrectly in petite.c, a buffer size calculation in unfsg_133 was incorrect in fsg.c, a possible infinite loop was fixed in tnef.c and a possible infinite loop in cabd_find was fixed in cabd.c . In addition to this, Marcin Owsiany reported that a corrupted DOC file causes a segmentation fault in ClamAV.
By sending a malicious attachment to a mail server that is hooked with ClamAV, a remote attacker could cause a Denial of Service or the execution of arbitrary code.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.87.1"
Clam AntiVirus is subject to vulnerabilities ranging from Denial of Service to execution of arbitrary code when handling compressed executables.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.87 | >= 0.87 |
Clam AntiVirus is a GPL anti-virus toolkit, designed for integration with mail servers to perform attachment scanning. Clam AntiVirus also provides a command line scanner and a tool for fetching updates of the virus database.
Clam AntiVirus is vulnerable to a buffer overflow in "libclamav/upx.c" when processing malformed UPX-packed executables. It can also be sent into an infinite loop in "libclamav/fsg.c" when processing specially-crafted FSG-packed executables.
By sending a specially-crafted file an attacker could execute arbitrary code with the permissions of the user running Clam AntiVirus, or cause a Denial of Service.
There is no known workaround at this time.
All Clam AntiVirus users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.87"
Clam AntiVirus is vulnerable to integer overflows when handling several file formats, potentially resulting in the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.86.2 | >= 0.86.2 |
Clam AntiVirus is a GPL anti-virus toolkit, designed for integration with mail servers to perform attachment scanning. Clam AntiVirus also provides a command line scanner and a tool for fetching updates of the virus database.
Neel Mehta and Alex Wheeler discovered that Clam AntiVirus is vulnerable to integer overflows when handling the TNEF, CHM and FSG file formats.
By sending a specially-crafted file an attacker could execute arbitrary code with the permissions of the user running Clam AntiVirus.
There is no known workaround at this time.
All Clam AntiVirus users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.86.2"
Clam AntiVirus is vulnerable to a Denial of Service attack when processing certain Quantum archives.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.86.1 | >= 0.86.1 |
Clam AntiVirus is a GPL anti-virus toolkit, designed for integration with mail servers to perform attachment scanning. Clam AntiVirus also provides a command line scanner and a tool for fetching updates of the virus database.
Andrew Toller and Stefan Kanthak discovered that a flaw in libmspack's Quantum archive decompressor renders Clam AntiVirus vulnerable to a Denial of Service attack.
A remote attacker could exploit this vulnerability to cause a Denial of Service by sending a specially crafted Quantum archive to the server.
There is no known workaround at this time.
All Clam AntiVirus users should upgrade to the latest available version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.86.1"
ClamAV contains two vulnerabilities that could lead to Denial of Service and evasion of virus scanning.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | <= 0.80 | >= 0.81 |
ClamAV is an antivirus toolkit. It includes a multi-threaded daemon and a command line scanner.
ClamAV fails to properly scan ZIP files with special headers (CAN-2005-0133) and base64 encoded images in URLs.
By sending a base64 encoded image file in a URL an attacker could evade virus scanning. By sending a specially-crafted ZIP file an attacker could cause a Denial of Service by crashing the clamd daemon.
There is no known workaround at this time.
All ClamAV users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.81"
With a specific configuration (using %f in the VirusEvent parameter), Clam AntiVirus is vulnerable to an attack allowing execution of arbitrary commands.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.70 | >= 0.70 |
From http://www.clamav.net/ :
"Clam AntiVirus is a GPL anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. Most importantly, the virus database is kept up to date."
The VirusEvent parameter in the clamav.conf configuration file allows to specify a system command to run whenever a virus is found. This system command can make use of the "%f" parameter which is replaced by the name of the file infected. The name of the file scanned is under control of the attacker and is not sufficiently checked. Version 0.70 of clamav disables the use of the "%f" parameter.
Sending a virus with a malicious file name can result in execution of arbirary system commands with the rights of the antivirus process. Since clamav is often associated to mail servers for email scanning, this attack can be used remotely.
You should not use the "%f" parameter in your VirusEvent configuration.
All users of Clam AntiVirus should upgrade to the latest stable version:
# emerge sync # emerge -pv ">=app-antivirus/clamav-0.70" # emerge ">=app-antivirus/clamav-0.70"
ClamAV is vulnerable to a denial of service attack when processing certain RAR archives.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | <= 0.68 | >= 0.68.1 |
From http://www.clamav.net/ :
"Clam AntiVirus is a GPL anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. Most importantly, the virus database is kept up to date."
Certain types of RAR archives, including those created by variants of the W32.Beagle.A@mm worm, may cause clamav to crash when it attempts to process them.
This vulnerability causes a Denial of Service in the clamav process. Depending on configuration, this may cause dependent services such as mail to fail as well.
A workaround is not currently known for this issue. All users are advised to upgrade to the latest version of the affected package.
ClamAV users should upgrade to version 0.68.1 or later:
# emerge sync # emerge -pv ">=app-antivirus/clamav-0.68.1" # emerge ">=app-antivirus/clamav-0.68.1"
Oliver Eikemeier has reported a vulnerability in Clam AV, which can be exploited by a malformed uuencoded message causing a denial of service for programs that rely on the clamav daemon, such as SMTP daemons.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-antivirus/clamav | * | < 0.67 | >= 0.67 |
Clam AntiVirus is a GPLed anti-virus toolkit, designed for integration with mail servers to perform attachment scanning. Clam AV also provides a command line scanner and a tool for fetching updates of the virus database.
Oliver Eikemeier of Fillmore Labs discovered the overflow in Clam AV 0.65 when it handled malformed UUEncoded messages, causing the daemon to shut down.
The problem originated in libclamav which calculates the line length of an uuencoded message by taking the ASCII value of the first character minus 64 while doing an assertion if the length is not in the allowed range, effectively terminating the calling program as clamav would not be available.
A malformed message would cause a denial of service, and depending on the server configuration this may impact other daemons relying on Clam AV in a fatal manner.
There is no immediate workaround, a software upgrade is required.
All users are urged to upgrade their Clam AV installations to Clam AV 0.67:
# emerge sync # emerge -pv ">=app-antivirus/clamav-0.6.7" # emerge ">=app-antivirus/clamav-0.6.7"