USN-7011-2: ClamAV vulnerabilities
USN-7011-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that ClamAV incorrectly handled certain PDF files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2024-20505) It was discovered that ClamAV incorrectly handled logfile privileges. A local attacker could use this issue to cause ClamAV to overwrite arbitrary files, possibly leading to privilege escalation. (CVE-2024-20506)
Affected Software
Event History
Frequently Asked Questions
What vulnerabilities are addressed in USN-7011-2?
USN-7011-2 addresses vulnerabilities in ClamAV, particularly issues with handling certain PDF files.
What versions of Ubuntu are affected by USN-7011-2?
USN-7011-2 affects Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
How do I resolve the vulnerabilities fixed in USN-7011-2?
To resolve the vulnerabilities, update ClamAV to version 0.103.12+dfsg-0ubuntu0.18.04.1+esm1 for Ubuntu 18.04 or 0.103.12+dfsg-0ubuntu0.16.04.1+esm1 for Ubuntu 16.04.
Is it safe to use ClamAV without applying the updates from USN-7011-2?
No, it is not safe to use ClamAV without applying the updates from USN-7011-2 as they fix critical vulnerabilities.
Where can I find more information about the vulnerabilities in USN-7011-2?
Further details about the vulnerabilities fixed in USN-7011-2 can be found in the original advisory from Ubuntu.