- Vulnerability/
- USN-3789-2
USN-3789-2: ClamAV vulnerabilities
First published: Tue Oct 16 2018(Updated: )
USN-3789-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled unpacking MEW executables. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/clamav | <0.100.2+dfsg-1ubuntu0.12.04.1 | 0.100.2+dfsg-1ubuntu0.12.04.1 |
| Ubuntu OpenSSH Client | =12.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2018-14679
- https://ubuntu.com/security/CVE-2018-14680
- https://ubuntu.com/security/CVE-2018-14681
- https://ubuntu.com/security/CVE-2018-14682
- https://ubuntu.com/security/CVE-2018-15378
- https://ubuntu.com/security/notices/USN-3728-3
- https://ubuntu.com/security/notices/USN-3728-1
- https://ubuntu.com/security/notices/USN-3728-2
- https://ubuntu.com/security/notices/USN-3789-1
- https://launchpad.net/ubuntu/+source/clamav/0.100.2+dfsg-1ubuntu0.12.04.1
- https://ubuntu.com/security/notices/USN-3789-2 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID for this ClamAV vulnerability?
The vulnerability ID for this ClamAV vulnerability is USN-3789-2.
What is the description of the ClamAV vulnerability?
The ClamAV vulnerability allows remote attackers to cause the application to crash.
What software is affected by this ClamAV vulnerability?
The ClamAV vulnerability affects Ubuntu 12.04 ESM with ClamAV version 0.100.2+dfsg-1ubuntu0.12.04.1.
What is the severity of the ClamAV vulnerability?
The severity of the ClamAV vulnerability is not mentioned in the information provided.
How can I fix the ClamAV vulnerability?
To fix the ClamAV vulnerability, you should update ClamAV to version 0.100.2+dfsg-1ubuntu0.12.04.1.
- agent/severity
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/title
- agent/references
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu openssh client
- version/ubuntu openssh client/12.04