CVE-2008-6845: Medium severity clamav vulnerability
Published Jul 2, 2009
·Updated
The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a corrupted LZH file.
Affected Software
77 affected components
clamav clamav<=0.93.3
clamav clamav=0.01
clamav clamav=0.02
clamav clamav=0.3
clamav clamav=0.03
clamav clamav=0.05
clamav clamav=0.10
clamav clamav=0.12
clamav clamav=0.13
clamav clamav=0.14-pre
clamav clamav=0.15
clamav clamav=0.20
clamav clamav=0.21
clamav clamav=0.22
clamav clamav=0.23
clamav clamav=0.24
clamav clamav=0.51
clamav clamav=0.52
clamav clamav=0.53
clamav clamav=0.54
clamav clamav=0.60
clamav clamav=0.60p
clamav clamav=0.65
clamav clamav=0.66
clamav clamav=0.67
clamav clamav=0.67-1
clamav clamav=0.68
clamav clamav=0.68.1
clamav clamav=0.70
clamav clamav=0.70-rc
clamav clamav=0.71
clamav clamav=0.72
clamav clamav=0.73
clamav clamav=0.74
clamav clamav=0.75
clamav clamav=0.75.1
clamav clamav=0.80
clamav clamav=0.80-rc4
clamav clamav=0.81
clamav clamav=0.82
clamav clamav=0.83
clamav clamav=0.84
clamav clamav=0.85
clamav clamav=0.85.1
clamav clamav=0.86
clamav clamav=0.86.1
clamav clamav=0.86.2
clamav clamav=0.87
clamav clamav=0.87.1
clamav clamav=0.88
clamav clamav=0.88.1
clamav clamav=0.88.2
clamav clamav=0.88.3
clamav clamav=0.88.4
clamav clamav=0.88.5
clamav clamav=0.88.6
clamav clamav=0.88.7
clamav clamav=0.88.7_p0
clamav clamav=0.88.7_p1
clamav clamav=0.90
clamav clamav=0.90.1
clamav clamav=0.90.1_p0
clamav clamav=0.90.2
clamav clamav=0.90.2_p0
clamav clamav=0.90.3
clamav clamav=0.90.3_p0
clamav clamav=0.90.3_p1
clamav clamav=0.91
clamav clamav=0.91.1
clamav clamav=0.91.2
clamav clamav=0.91.2_p0
clamav clamav=0.92
clamav clamav=0.92.1
clamav clamav=0.92_p0
clamav clamav=0.93
clamav clamav=0.93.1
clamav clamav=0.93.2
Event History
Jul 2, 2009
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-6845?
CVE-2008-6845 has a severity level categorized as High due to its potential for denial of service.
2
How do I fix CVE-2008-6845?
The recommended fix for CVE-2008-6845 is to upgrade ClamAV to version 0.93.4 or later.
3
What kind of attack does CVE-2008-6845 enable?
CVE-2008-6845 allows remote attackers to cause a denial of service through crafted LZH files.
4
Which versions of ClamAV are affected by CVE-2008-6845?
CVE-2008-6845 affects ClamAV versions up to and including 0.93.3.
5
Can CVE-2008-6845 lead to data loss?
While CVE-2008-6845 primarily causes denial of service, it may lead to disruptions in service that can impact data processing.