PT-2018-5391 · Clamav+3 · Clamav Antivirus+3
Published
2018-01-26
·
Updated
2026-02-06
·
CVE-2017-12374
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
ClamAV AntiVirus versions 0.99.2 and prior
Description:
The issue is due to a lack of input validation checking mechanisms during certain mail parsing operations, specifically
mbox.c operations on bounce messages. This could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. If successfully exploited, the ClamAV software could allow a variable pointing to the mail body, which could cause a use-after-free instance, leading to a disruption of services on an affected device, including a denial of service condition.Recommendations:
For ClamAV AntiVirus versions 0.99.2 and prior, update to a version later than 0.99.2 to resolve the issue.
As a temporary workaround, consider restricting access to
mbox.c operations on bounce messages until a patch is available.Exploit
Fix
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Clamav Antivirus
Suse
Ubuntu