Buffer over-read in ClamAV - CVE-2017-12378
Published: January 29, 2018
Vulnerability identifier: #VU10316
CSH Severity: Low
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-12378
CWE-ID: CWE-126
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists due to input validation checking mechanisms of .tar (Tape Archive) files. A remote attacker can send a specially crafted input, trigger checksum buffer over-read condition and cause the service to crash.
The weakness exists due to input validation checking mechanisms of .tar (Tape Archive) files. A remote attacker can send a specially crafted input, trigger checksum buffer over-read condition and cause the service to crash.
Affected software
ClamAV
Gentoo Linux
Arch Linux
Amazon Linux AMI
Fedora
SUSE Linux
Ubuntu
Opensuse
clamav (Alpine package)
clamav
Gentoo Linux
Arch Linux
Amazon Linux AMI
Fedora
SUSE Linux
Ubuntu
Opensuse
clamav (Alpine package)
clamav
How to mitigate CVE-2017-12378
Update to version 0.99.3.
clamav (Alpine package) - update to 0.100.1-r0
clamav - addressed in versions 0.99.3-1.el7, 0.99.3-1.fc26, 0.99.3-1.fc27, 0.99.3-8.el6
clamav - addressed in versions 0.99.3-1.el7, 0.99.3-1.fc26, 0.99.3-1.fc27, 0.99.3-8.el6
External References
Related Security Bulletins
- Multiple vulnerabilities in ClamAV AntiVirus
- Gentoo update for ClamAV
- Ubuntu update for ClamAV
- Ubuntu update for ClamAV
- Arch Linux update for clamav
- Arch Linux update for clamav
- Amazon Linux AMI update for clamav
- SUSE Linux update for clamav
- SUSE Linux update for clamav
- OpenSUSE Linux update for clamav
- Buffer over-read in clamav (Alpine package)
- Fedora 27 update for clamav
- Fedora 26 update for clamav
- Fedora EPEL 7 update for clamav
- Fedora EPEL 6 update for clamav