CVE-2018-15378: Clam AntiVirus unmew11() Denial of Service Vulnerability
A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due to an error related to the MEW unpacker within the "unmew11()" function (libclamav/mew.c), which can be exploited to trigger an invalid read memory access via a specially crafted EXE file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this ClamAV vulnerability?
The vulnerability ID for this ClamAV vulnerability is CVE-2018-15378.
What is the severity of CVE-2018-15378?
The severity of CVE-2018-15378 is medium with a CVSS score of 5.5.
How does CVE-2018-15378 affect ClamAV?
CVE-2018-15378 allows an attacker to cause a denial of service (DoS) condition in ClamAV versions prior to 0.100.2.
How can I fix CVE-2018-15378?
To fix CVE-2018-15378, update your ClamAV installation to version 0.100.2 or later.
Where can I find more information about CVE-2018-15378?
You can find more information about CVE-2018-15378 in the following references: [Bugzilla](https://bugzilla.clamav.net/show_bug.cgi?id=12170), [Secunia Research](https://secuniaresearch.flexerasoftware.com/advisories/83000/), [Ubuntu Security Notice](https://usn.ubuntu.com/3789-1/).