It was discovered that ClamAV incorrectly handled parsing certain mail messages. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-12374, CVE-2017-12375, CVE-2017-12379, CVE-2017-12380)
It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-12376)
It was discovered that ClamAV incorrectly handled parsing certain mew packet files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-12377)
It was discovered that ClamAV incorrectly handled parsing certain TAR files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2017-12378)
In the default installation, attackers would be isolated by the ClamAV AppArmor profile.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "clamav", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "clamav-base", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "clamav-daemon", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "clamav-daemon-dbgsym", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "clamav-dbg", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "clamav-dbgsym", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "clamav-docs", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "clamav-freshclam", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "clamav-freshclam-dbgsym", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "clamav-milter", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "clamav-milter-dbgsym", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "clamav-testfiles", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "libclamav-dev", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "libclamav-dev-dbgsym", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "libclamav7", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" }, { "binary_name": "libclamav7-dbgsym", "binary_version": "0.99.3+addedllvm-0ubuntu0.14.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "clamav", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "clamav-base", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "clamav-daemon", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "clamav-daemon-dbgsym", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "clamav-dbg", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "clamav-dbgsym", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "clamav-docs", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "clamav-freshclam", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "clamav-freshclam-dbgsym", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "clamav-milter", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "clamav-milter-dbgsym", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "clamav-testfiles", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "clamdscan", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "clamdscan-dbgsym", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "libclamav-dev", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "libclamav-dev-dbgsym", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "libclamav7", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" }, { "binary_name": "libclamav7-dbgsym", "binary_version": "0.99.3+addedllvm-0ubuntu0.16.04.1" } ] }