Buffer over-read in ClamAV - CVE-2018-15378
Published: October 16, 2018
Vulnerability identifier: #VU15374
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-15378
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition related to MEW unpacker within the unmew11() function in libclamav/mew.c. A remote attacker can create a specially crafted EXE file, pass it to vulnerable application and trigger invalid memory read.
Affected software
ClamAV
Amazon Linux AMI
Fedora
Opensuse
clamav (Alpine package)
clamav
Amazon Linux AMI
Fedora
Opensuse
clamav (Alpine package)
clamav
How to mitigate CVE-2018-15378
Install updates from vendor's website.
ClamAV - update to 0.100.2
clamav (Alpine package) - update to 0.100.2-r0
clamav - addressed in versions 0.100.2-1.el6, 0.100.2-2.el7, 0.100.2-2.fc27, 0.100.2-2.fc28, 0.100.2-2.fc29
clamav (Alpine package) - update to 0.100.2-r0
clamav - addressed in versions 0.100.2-1.el6, 0.100.2-2.el7, 0.100.2-2.fc27, 0.100.2-2.fc28, 0.100.2-2.fc29
External References
Related Security Bulletins
- Denial of service in ClamAV
- OpenSUSE Linux update for clamav
- OpenSUSE Linux update for clamav
- Amazon Linux AMI update for clamav
- Buffer over-read in clamav (Alpine package)
- Fedora 29 update for clamav
- Fedora 28 update for clamav
- Fedora 27 update for clamav
- Fedora EPEL 7 update for clamav
- Fedora EPEL 6 update for clamav