Описание
The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| clamav | fixed | 0.99.3~beta1+dfsg-1 | package | |
| clamav | fixed | 0.99.2+dfsg-6+deb9u1 | stretch | package |
| clamav | fixed | 0.99.2+dfsg-0+deb8u3 | jessie | package |
Примечания
https://bugzilla.clamav.net/show_bug.cgi?id=11798
https://github.com/vrtadmin/clamav-devel/commit/dfc00cd3301a42b571454b51a6102eecf58407bc
https://github.com/vrtadmin/clamav-devel/commit/60671e3deb1df6c626e5c7e13752c2eec1649f98
EPSS
Связанные уязвимости
The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression.
The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression.
The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression.
Уязвимость функции wwunpack (libclamav/wwunpack.c) средства антивирусной защиты Clam Antivirus, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2017-2296: package `clamav` update to version 0.99.2-alt3
EPSS