PT-2018-8667 · Cisco+3 · Clamav+3

Publicado 2018-03-04 · Atualizado 2026-02-06 · CVE-2018-0202

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: ClamAV versions prior to 0.99.4

Description: The issue is caused by improper input validation when handling Portable Document Format (.pdf) files, allowing an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This can be achieved by sending a crafted .pdf file, which could cause an out-of-bounds read when scanned, resulting in a DoS condition. The vulnerability concerns the pdf parse array and pdf parse string functions in libclamav/pdfng.c.

Recommendations: For ClamAV versions prior to 0.99.4, update to version 0.99.4 or later to resolve the issue. As a temporary workaround, consider restricting the scanning of .pdf files until the update is applied.

Correção

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2018-1363

CLEANSTART-2026-LA13761

CLEANSTART-2026-NJ87139

CLEANSTART-2026-TC95380

CLEANSTART-2026-WX01708

CVE-2018-0202

DLA-1307-1

MGASA-2018-0169

OPENSUSE-SU-2018_0825-1

OPENSUSE-SU-2024:10685-1

SUSE-SU-2018:0809-1

SUSE-SU-2018:0863-1

USN-3592-1

USN-3592-2

Produtos afetados

Alt Linux

Clamav

Suse

Ubuntu

Referências · 169

• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WX01708.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LA13761.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NJ87139 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TC95380.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TC95380 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LA13761 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NJ87139.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-11423 · Nota de Segurança
• https://suse.com/security/cve/CVE-2020-3350 · Nota
• https://osv.dev/vulnerability/CVE-2023-20197 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-48579 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-12376 · Nota de Segurança
• https://suse.com/security/cve/CVE-2005-3239 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0361 · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-0360 · Nota