clamav

Link package | bugs open | bugs closed | Wiki | GitHub | web search
Description Anti-virus toolkit for Unix
Version 1.4.1-1 [extra]

Resolved

Group Affected Fixed Severity Status Ticket
AVG-2722 0.104.2-1 0.105.0-1 High Fixed
AVG-1787 0.103.1-1 0.103.2-1 Low Fixed
AVG-1168 0.102.1-1 0.102.3-1 High Fixed
AVG-602 0.99.3-1 0.99.4-1 Critical Fixed
AVG-601 0.99.2-1 0.99.3-1 Critical Fixed FS#57233
Issue Group Severity Remote Type Description
CVE-2022-20803 AVG-2722 Unknown Yes Arbitrary code execution
possible double-free vulnerability in the OLE2 file parser
CVE-2022-20796 AVG-2722 Medium Unknown Unknown
possible NULL-pointer dereference crash in the scan verdict cache check
CVE-2022-20792 AVG-2722 Unknown Yes Arbitrary code execution
possible multi-byte heap buffer overflow write vulnerability in the signature database load module
CVE-2022-20785 AVG-2722 High Yes Denial of service
possible memory leak in the HTML file parser / Javascript normalizer
CVE-2022-20771 AVG-2722 High Yes Denial of service
possible infinite loop vulnerability in the TIFF file parser. The issue only occurs if the "--alert-broken-media" ClamScan option is enabled. For ClamD, the...
CVE-2022-20770 AVG-2722 High Yes Denial of service
possible infinite loop vulnerability in the CHM file parser
CVE-2021-1405 AVG-1787 Low Yes Denial of service
A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker...
CVE-2021-1404 AVG-1787 Low Yes Denial of service
A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions could allow an unauthenticated,...
CVE-2021-1252 AVG-1787 Low Yes Denial of service
A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated,...
CVE-2020-7613 AVG-1168 High No Arbitrary command execution
clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the `_is_clamav_binary` function located...
CVE-2020-3123 AVG-1168 High Yes Denial of service
A denial-of-service (DoS) condition may occur when using the optional credit card data-loss-prevention (DLP) feature. Improper bounds checking of an...
CVE-2018-1000085 AVG-602 Medium Yes Denial of service
A heap-based out-of-bounds read has been found in the xar_hash_check function of the xar decoder of ClamAV before 0.99.4, leading to a denial of service.
CVE-2018-0202 AVG-602 Critical Yes Arbitrary code execution
A heap overflow has been discovered in ClamAv before 0.99.4 in pdf_parse_string possibly leading to arbitrary code execution by inspecting a specially...
CVE-2017-12380 AVG-601 Medium Yes Denial of service
ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of...
CVE-2017-12379 AVG-601 Critical Yes Arbitrary code execution
ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of...
CVE-2017-12378 AVG-601 Medium Yes Denial of service
ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of...
CVE-2017-12377 AVG-601 Critical Yes Arbitrary code execution
ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of...
CVE-2017-12376 AVG-601 Critical Yes Arbitrary code execution
ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of...
CVE-2017-12375 AVG-601 Medium Yes Denial of service
ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of...
CVE-2017-12374 AVG-601 Medium Yes Denial of service
ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of...
CVE-2017-11423 AVG-602 Medium Yes Denial of service
The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV before 0.99.4  and other products, allows remote attackers to cause...
CVE-2017-6420 AVG-601 Medium Yes Denial of service
The wwunpack function in libclamav/wwunpack.c in ClamAV before 0.99.3 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE...
CVE-2017-6419 AVG-602 Critical Yes Arbitrary code execution
mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV before 0.99.4, allows remote attackers to cause a denial of service (heap-based buffer overflow and...
CVE-2017-6418 AVG-601 Medium Yes Denial of service
libclamav/message.c in ClamAV before 0.99.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message.
CVE-2012-6706 AVG-602 Critical Yes Arbitrary code execution
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products,...

Advisories

Date Advisory Group Severity Type
18 Mar 2018 ASA-201803-14 AVG-602 Critical multiple issues
09 Feb 2018 ASA-201802-1 AVG-601 Critical multiple issues