ClamAV 0.103.8, 0.105.2 and 1.0.1 critical patches

FanJ · Feb 16, 2023

ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published
February 15, 2023
https://blog.clamav.net/2023/02/clamav-01038-01052-and-101-patch.html

Today, we are releasing the following critical patch versions for ClamAV:
• 0.103.8
• 0.105.2
• 1.0.1
Click to expand...

ClamAV 0.104 has reached end-of-life according to the ClamAV End of Life (EOL) policy and will not be patched. Anyone using ClamAV 0.104 must switch to a supported version. All users should update as soon as possible to patch for two remote code execution vulnerabilities that we recently discovered and patched.

The release files are available for download on ClamAV.net, on the Github Release page, and through Docker Hub.
Click to expand...

Read there more!

FanJ · Feb 23, 2023

Follow-up:
ClamAV HFS+ Partition Scanning Buffer Overflow Vulnerability Affecting Cisco Products: February 2023
https://sec.cloudapps.cisco.com/sec...CiscoSecurityAdvisory/cisco-sa-clamav-q8DThCy
Advisory ID:
cisco-sa-clamav-q8DThCy
First Published:
2023 February 15 16:00 GMT
Last Updated:
2023 February 22 14:09 GMT
Version 1.4:
Final

On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed:

A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to execute arbitrary code.
Click to expand...

This vulnerability is due to a missing buffer size check that may result in a heap buffer overflow write. An attacker could exploit this vulnerability by submitting a crafted HFS+ partition file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the ClamAV scanning process, or else crash the process, resulting in a denial of service (DoS) condition.
Click to expand...

Read there more!

Log in or Sign up

ClamAV 0.103.8, 0.105.2 and 1.0.1 critical patches

FanJ Updates Team

FanJ Updates Team

Log in or Sign up

ClamAV 0.103.8, 0.105.2 and 1.0.1 critical patches

FanJ Updates Team

FanJ Updates Team

Useful Searches