USN-3592-1: ClamAV vulnerabilities
USN-3592-1: ClamAV vulnerabilities clamav vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Several security issues were fixed in ClamAV. Software Description clamav – Anti-virus utility for Unix Details It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-0202) Hanno Böck discovered that ClamAV incorrectly handled parsing certain XAR files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2018-1000085) Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 17.10 clamav – 0.99.4+addedllvm-0ubuntu0.17.10.1 Ubuntu 16.04 LTS clamav – 0.99.4+addedllvm-0ubuntu0.16.04.1 Ubuntu 14.04 LTS clamav – 0.99.4+addedllvm-0ubuntu0.14.04.1 To [ more… ]