Search CVE reports
31 – 40 of 165 results
CVE-2019-12625
Medium priorityClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service condition by sending crafted messages to an affected system.
1 affected packages
clamav
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
clamav | — | — | — | Fixed | Fixed |
CVE-2019-1010305
Medium prioritySome fixes available 11 of 13
libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a...
2 affected packages
clamav, libmspack
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
clamav | Not affected | Not affected | Not affected | Not affected | Not affected |
libmspack | Fixed | Fixed | Fixed | Fixed | Fixed |
CVE-2019-12900
Medium priorityBZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
2 affected packages
bzip2, clamav
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
bzip2 | — | — | — | Fixed | Fixed |
clamav | — | — | — | Fixed | Fixed |
CVE-2019-1798
Medium priorityA vulnerability in the Portable Executable (PE) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on...
2 affected packages
clamav, libclamunrar
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
clamav | — | — | — | Not affected | Not affected |
libclamunrar | — | — | — | Not affected | Not affected |
CVE-2019-1786
Medium priorityA vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service (DoS)...
1 affected packages
clamav
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
clamav | — | — | — | Not affected | Not affected |
CVE-2019-1785
Medium priorityA vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device....
2 affected packages
clamav, libclamunrar
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
clamav | — | — | — | Not affected | Not affected |
libclamunrar | — | — | — | Not affected | Not affected |
CVE-2019-1789
Medium priorityClamAV versions prior to 0.101.2 are susceptible to a denial of service (DoS) vulnerability. An out-of-bounds heap read condition may occur when scanning PE files. An example is Windows EXE and DLL files that have been packed...
1 affected packages
clamav
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
clamav | — | — | — | Fixed | Fixed |
CVE-2019-1788
Medium priorityA vulnerability in the Object Linking & Embedding (OLE2) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service...
1 affected packages
clamav
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
clamav | — | — | — | Fixed | Fixed |
CVE-2019-1787
Medium priorityA vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service (DoS)...
1 affected packages
clamav
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
clamav | — | — | — | Fixed | Fixed |
CVE-2018-18586
Negligible priority** DISPUTED ** chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM files, leading to Directory Traversal. NOTE: the vendor...
2 affected packages
clamav, libmspack
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
clamav | — | — | — | Not affected | Not affected |
libmspack | — | — | — | Not affected | Not affected |