USN-3550-1

Dashboard / Vulnerabilities / USN-3550-1

USN-3550-1

Summary: clamav vulnerabilities

Details: It was discovered that ClamAV incorrectly handled parsing certain mail messages. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-12374, CVE-2017-12375, CVE-2017-12379, CVE-2017-12380) It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-12376) It was discovered that ClamAV incorrectly handled parsing certain mew packet files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-12377) It was discovered that ClamAV incorrectly handled parsing certain TAR files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2017-12378) In the default installation, attackers would be isolated by the ClamAV AppArmor profile.

References: https://ubuntu.com/security/notices/USN-3550-1, https://ubuntu.com/security/CVE-2017-12374, https://ubuntu.com/security/CVE-2017-12375, https://ubuntu.com/security/CVE-2017-12376, https://ubuntu.com/security/CVE-2017-12377, https://ubuntu.com/security/CVE-2017-12378, https://ubuntu.com/security/CVE-2017-12379, https://ubuntu.com/security/CVE-2017-12380