- Vulnerability/
- USN-3728-3
USN-3728-3: ClamAV vulnerabilities
First published: Thu Aug 02 2018(Updated: )
USN-3728-2 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Hanno Böck discovered that libmspack incorrectly handled certain CHM files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-14679, CVE-2018-14680) Jakub Wilk discovered that libmspack incorrectly handled certain KWAJ files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-14681) Dmitry Glavatskikh discovered that libmspack incorrectly certain CHM files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-14682)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/clamav | <0.100.1+dfsg-1ubuntu0.12.04.3 | 0.100.1+dfsg-1ubuntu0.12.04.3 |
| Ubuntu OpenSSH Client | =12.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2018-14679
- https://ubuntu.com/security/CVE-2018-14680
- https://ubuntu.com/security/CVE-2018-14681
- https://ubuntu.com/security/CVE-2018-14682
- https://ubuntu.com/security/notices/USN-3789-2
- https://ubuntu.com/security/notices/USN-3728-1
- https://ubuntu.com/security/notices/USN-3728-2
- https://launchpad.net/ubuntu/+source/clamav/0.100.1+dfsg-1ubuntu0.12.04.3
- https://ubuntu.com/security/notices/USN-3728-3 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is USN-3728-3.
What is the affected software for this vulnerability?
The affected software for this vulnerability is ClamAV version 0.100.1+dfsg-1ubuntu0.12.04.3 on Ubuntu 12.04.
What is the severity of this vulnerability?
The severity of this vulnerability is not specified.
How does this vulnerability impact the system?
This vulnerability could allow an attacker to cause a denial of service.
Is there a fix available for this vulnerability?
Yes, the fix for this vulnerability is provided in the update for Ubuntu 12.04 ESM.
- agent/severity
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/title
- agent/references
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu openssh client
- version/ubuntu openssh client/12.04