PT-2018-5394 · Cisco+3 · Clamav+3

Published 2018-01-26 · Updated 2026-02-06 · CVE-2017-12378

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: ClamAV AntiVirus software versions 0.99.2 and prior

Description: The issue is caused by improper input validation checking mechanisms of .tar files sent to an affected device. A successful exploit could cause a checksum buffer over-read condition when ClamAV scans the malicious .tar file, potentially allowing an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device.

Recommendations: For ClamAV AntiVirus software versions 0.99.2 and prior, update to a version later than 0.99.2 to resolve the issue. As a temporary workaround, consider restricting the scanning of .tar files until a patch is available.

Exploit

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2018-1096

CLEANSTART-2026-LA13761

CLEANSTART-2026-NJ87139

CLEANSTART-2026-TC95380

CLEANSTART-2026-WX01708

CVE-2017-12378

DLA-1261-1

MGASA-2018-0117

OPENSUSE-SU-2018_0258-1

OPENSUSE-SU-2024:10685-1

SUSE-SU-2018:0254-1

SUSE-SU-2018:0255-1

USN-3550-1

USN-3550-2

Affected Products

Alt Linux

Clamav

Suse

Ubuntu

References · 175

• 🔥 https://bugzilla.clamav.net/show_bug.cgi?id=11946 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-11423 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48579 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-12376 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0361 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/L2ULSX6GBGUOCP4V67LMFVR2C7DKKXCU · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20197 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0202 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1404 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-20698 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-12378 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3550-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12379 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0254-1 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-NJ87139 · Vendor Advisory