USN-6636-1: ClamAV vulnerabilities
It was discovered that ClamAV incorrectly handled parsing certain OLE2 files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2024-20290) Amit Schendel discovered that the ClamAV ClamD service incorrectly handled the VirusEvent feature. An attacker able to connect to ClamD could possibly use this issue to execute arbitrary code. (CVE-2024-20328)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6636-1?
The severity of USN-6636-1 is considered high as it allows for a denial of service through remote exploitation.
How do I fix USN-6636-1?
To fix USN-6636-1, update ClamAV to version 1.0.5+dfsg-0ubuntu0.23.10.1 or later.
What does USN-6636-1 affect?
USN-6636-1 affects the ClamAV antivirus software running on Ubuntu 23.10.
Can USN-6636-1 lead to data leakage?
No, USN-6636-1 primarily leads to a denial of service rather than data leakage.
Who discovered the issue in USN-6636-1?
The issue in USN-6636-1 was discovered by Amit Schendel.