PT-2018-8787 · Cisco+3 · Clamav+3

Publicado 2018-07-16 · Atualizado 2026-02-06 · CVE-2018-0360

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ClamAV versions prior to 0.100.1

Description The issue is related to an integer overflow in the HWP parser, which can cause an infinite loop when processing a crafted Hangul Word Processor file. This occurs in the parsehwp3 paragraph() function located in libclamav/hwp.c.

Recommendations For versions prior to 0.100.1, update to version 0.100.1 or later to resolve the issue. As a temporary workaround, consider restricting the processing of Hangul Word Processor files until the update is applied.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2018-2030

CLEANSTART-2026-LA13761

CLEANSTART-2026-NJ87139

CLEANSTART-2026-TC95380

CLEANSTART-2026-WX01708

CVE-2018-0360

DLA-1461-1

MGASA-2018-0317

OPENSUSE-SU-2018_2259-1

OPENSUSE-SU-2018_2406-1

OPENSUSE-SU-2024:10685-1

SUSE-SU-2018:2230-1

SUSE-SU-2018:2232-1

SUSE-SU-2018:2323-1

SUSE-SU-2018:2323-2

SUSE-SU-2018_2230-1

SUSE-SU-2018_2232-1

SUSE-SU-2018_2323-1

SUSE-SU-2018_2323-2

USN-3722-1

USN-3722-2

USN-3722-3

USN-3722-5

Produtos afetados

Alt Linux

Clamav

Suse

Ubuntu

Referências · 182

• https://github.com/Cisco-Talos/clamav-devel/blob/dev/0.101/NEWS.md · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WX01708.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LA13761.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NJ87139 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TC95380.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TC95380 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LA13761 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NJ87139.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-11423 · Nota de Segurança
• https://suse.com/security/cve/CVE-2020-3350 · Nota
• https://osv.dev/vulnerability/CVE-2023-20197 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-48579 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-12376 · Nota de Segurança
• https://suse.com/support/update/announcement/2018/suse-su-20182323-1 · Nota
• https://suse.com/security/cve/CVE-2005-3239 · Nota