USN-4230-1: ClamAV vulnerability
Published Jan 8, 2020
·Updated
It was discovered that ClamAV incorrectly handled certain MIME messages. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service.
Affected Software
8 affected componentsFixes available
All of the following
ubuntu/clamav<0.102.1+dfsg-0ubuntu0.19.10.2
0.102.1+dfsg-0ubuntu0.19.10.2
Ubuntu Ubuntu=19.10
All of the following
ubuntu/clamav<0.102.1+dfsg-0ubuntu0.19.04.2
0.102.1+dfsg-0ubuntu0.19.04.2
Ubuntu Ubuntu=19.04
All of the following
ubuntu/clamav<0.102.1+dfsg-0ubuntu0.18.04.2
0.102.1+dfsg-0ubuntu0.18.04.2
Ubuntu Ubuntu=18.04
All of the following
ubuntu/clamav<0.102.1+dfsg-0ubuntu0.16.04.2
0.102.1+dfsg-0ubuntu0.16.04.2
Ubuntu Ubuntu=16.04
Event History
Jan 8, 2020
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-4230-1?
The severity of USN-4230-1 is classified as a denial of service vulnerability.
2
How do I fix USN-4230-1?
To fix USN-4230-1, upgrade ClamAV to version 0.102.1+dfsg-0ubuntu0.19.10.2 or later.
3
Which versions of ClamAV are affected by USN-4230-1?
USN-4230-1 affects ClamAV versions prior to 0.102.1+dfsg-0ubuntu0.19.10.2.
4
What products are affected by USN-4230-1?
The products affected by USN-4230-1 are Ubuntu 19.10, 19.04, 18.04, and 16.04.
5
Who discovered USN-4230-1?
USN-4230-1 was discovered by security researchers tracking vulnerabilities in ClamAV.