MGASA-2017-0291

Source
https://advisories.mageia.org/MGASA-2017-0291.html
Import Source
https://advisories.mageia.org/MGASA-2017-0291.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2017-0291
Related
Published
2017-08-21T20:00:42Z
Modified
2017-08-21T19:40:01Z
Summary
Updated clamav packages fix security vulnerabilities
Details

It was discovered that ClamAV incorrectly handled parsing certain e-mail messages. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service (CVE-2017-6418).

It was discovered that ClamAV incorrectly handled parsing certain PE files with WWPack compression. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service (CVE-2017-6420).

References
Credits

Affected packages