PT-2018-9264 · Cisco+3 · Clamav+3

Hanno Böck · Published 2018-02-27 · Updated 2026-02-06 · CVE-2018-1000085

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: ClamAV version 0.99.3

Description: The issue is related to an out of bounds heap memory read in the XAR parser, specifically in the xar hash check() function. This can lead to memory leaking, potentially aiding in the development of exploit chains. The attack is exploitable if the victim scans a crafted XAR file.

Recommendations: For ClamAV version 0.99.3, consider updating to a version that includes the fix committed after d96a6b8bcc7439fa7e3876207aa0a8e79c8451b6 to resolve the issue. As a temporary workaround, avoid scanning potentially crafted XAR files to minimize the risk of exploitation.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2018-1363

CLEANSTART-2026-LA13761

CLEANSTART-2026-NJ87139

CLEANSTART-2026-TC95380

CLEANSTART-2026-WX01708

CVE-2018-1000085

DLA-1307-1

MGASA-2018-0169

OPENSUSE-SU-2018_0825-1

OPENSUSE-SU-2018_2406-1

OPENSUSE-SU-2024:10685-1

SUSE-SU-2018:0809-1

SUSE-SU-2018:0863-1

SUSE-SU-2018:2323-1

SUSE-SU-2018:2323-2

USN-3592-1

USN-3592-2

Affected Products

Alt Linux

Clamav

Suse

Ubuntu

References · 178

• https://github.com/Cisco-Talos/clamav-devel/commit/d96a6b8bcc7439fa7e3876207aa0a8e79c8451b6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-11423 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48579 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-12376 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0361 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-20197 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0202 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1404 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-20698 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1000085 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-NJ87139 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3592-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6419 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-3341 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20290 · Security Note