- Vulnerability/
- USN-3722-1
USN-3722-1: ClamAV vulnerabilities
First published: Tue Jul 24 2018(Updated: )
It was discovered that ClamAV incorrectly handled parsing certain HWP files. A remote attacker could use this issue to cause ClamAV to hang, resulting in a denial of service. (CVE-2018-0360) It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to hang, resulting in a denial of service. (CVE-2018-0361)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/clamav | <0.100.1+dfsg-1ubuntu0.18.04.1 | 0.100.1+dfsg-1ubuntu0.18.04.1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/clamav | <0.100.1+dfsg-1ubuntu0.16.04.1 | 0.100.1+dfsg-1ubuntu0.16.04.1 |
| Ubuntu Ubuntu | =16.04 | |
| All of | ||
| ubuntu/clamav | <0.100.1+dfsg-1ubuntu0.14.04.1 | 0.100.1+dfsg-1ubuntu0.14.04.1 |
| Ubuntu Ubuntu | =14.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2018-0360
- https://ubuntu.com/security/CVE-2018-0361
- https://ubuntu.com/security/notices/USN-3722-2
- https://launchpad.net/ubuntu/+source/clamav/0.100.1+dfsg-1ubuntu0.18.04.1
- https://launchpad.net/ubuntu/+source/clamav/0.100.1+dfsg-1ubuntu0.16.04.1
- https://launchpad.net/ubuntu/+source/clamav/0.100.1+dfsg-1ubuntu0.14.04.1
- https://ubuntu.com/security/notices/USN-3722-1 (Advisory)
Frequently Asked Questions
What is the severity of USN-3722-1?
The severity of USN-3722-1 is moderate.
How does ClamAV handle parsing certain HWP files?
ClamAV incorrectly handles parsing certain HWP files.
What is the impact of the ClamAV vulnerability in parsing PDF files?
The vulnerability in parsing certain PDF files can result in a denial of service.
How can a remote attacker exploit the ClamAV vulnerabilities?
A remote attacker can exploit the vulnerabilities to cause ClamAV to hang or result in a denial of service.
How can I fix the ClamAV vulnerabilities?
Update ClamAV to version 0.100.1+dfsg-1ubuntu0.18.04.1, 0.100.1+dfsg-1ubuntu0.16.04.1, or 0.100.1+dfsg-1ubuntu0.14.04.1 depending on your Ubuntu version.
- agent/severity
- agent/references
- agent/title
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- agent/description
- collector/usn
- source/Ubuntu
- anchor-related/USN-3722-2
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04
- version/ubuntu ubuntu/14.04