CVE-2018-0202: Input Validation
First published: Tue Mar 06 2018(Updated: )
clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Clamav Clamav | <=0.99.3 | |
| Canonical Ubuntu Linux | =12.04 | |
| Canonical Ubuntu Linux | =14.04 | |
| Canonical Ubuntu Linux | =16.04 | |
| Canonical Ubuntu Linux | =17.10 | |
| Debian Debian Linux | =7.0 | |
| ubuntu/clamav | <0.99.4+ | 0.99.4+ |
| ubuntu/clamav | <0.99.4+ | 0.99.4+ |
| ubuntu/clamav | <0.99.4 | 0.99.4 |
| ubuntu/clamav | <0.99.4+ | 0.99.4+ |
| debian/clamav | 0.103.10+dfsg-0+deb11u1 1.0.5+dfsg-1~deb12u1 1.3.1+dfsg-5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.clamav.net/show_bug.cgi?id=11973
- https://bugzilla.clamav.net/show_bug.cgi?id=11980
- https://lists.debian.org/debian-lts-announce/2018/03/msg00011.html
- https://security.gentoo.org/glsa/201804-16
- https://usn.ubuntu.com/3592-1/
- https://usn.ubuntu.com/3592-2/
- https://launchpad.net/bugs/cve/CVE-2018-0202
- https://github.com/Cisco-Talos/clamav-devel/commit/87aaa10b29476958f5bf54b6119a133069f944fc
- https://github.com/Cisco-Talos/clamav-devel/commit/700ed96af56077cb1a9bff7b91d21db112f6465d
- https://github.com/Cisco-Talos/clamav-devel/commit/0df2fedf2805e574512c486b32a0fff4ed394560
- https://github.com/Cisco-Talos/clamav-devel/commit/495fce917445063d519f14b0009cee025f817bc3
- https://github.com/Cisco-Talos/clamav-devel/commit/99eadf7a9ad351210165312362d1f32b77c6f857
- https://security-tracker.debian.org/tracker/CVE-2018-0202
- https://ubuntu.com/security/notices/USN-3592-1
- https://ubuntu.com/security/notices/USN-3592-2
- https://www.cve.org/CVERecord?id=CVE-2018-0202
- https://nvd.nist.gov/vuln/detail/CVE-2018-0202
- https://ubuntu.com/security/CVE-2018-0202
Frequently Asked Questions
What is CVE-2018-0202?
CVE-2018-0202 is a vulnerability in ClamAV before 0.99.4 that could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device.
How severe is CVE-2018-0202?
CVE-2018-0202 has a severity rating of 5.5 (medium).
What is the affected software for CVE-2018-0202?
The affected software for CVE-2018-0202 includes ClamAV versions before 0.99.4.
How do I fix CVE-2018-0202?
To fix CVE-2018-0202, update to ClamAV version 0.99.4 or higher.
Are there any additional resources about CVE-2018-0202?
Yes, you can find more information about CVE-2018-0202 in the following references: [Link 1](https://lists.debian.org/debian-lts-announce/2018/03/msg00011.html), [Link 2](https://bugzilla.clamav.net/show_bug.cgi?id=11973), [Link 3](https://bugzilla.clamav.net/show_bug.cgi?id=11980).
- collector/nvd-index
- agent/author
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/description
- agent/remedy
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/severity
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/clamav
- canonical/clamav clamav
- version/clamav clamav/0.99.3
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/12.04
- version/canonical ubuntu linux/14.04
- version/canonical ubuntu linux/16.04
- version/canonical ubuntu linux/17.10
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/7.0
- package-manager/ubuntu
- package-manager/debian