ClamAV Remote Code Execution And Denial of Service Vulnerabilities
BID:59434
Info
ClamAV Remote Code Execution And Denial of Service Vulnerabilities
| Bugtraq ID: | 59434 |
| Class: | Unknown |
| CVE: |
CVE-2013-2020 CVE-2013-2021 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 23 2013 12:00AM |
| Updated: | Apr 16 2015 06:12PM |
| Credit: | David Raynor |
| Vulnerable: |
Ubuntu Ubuntu Linux 10.04 LTS MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 ifenslave ifenslave 0.88 Gentoo Linux Clam Anti-Virus ClamAV 0.96.5 Clam Anti-Virus ClamAV 0.96.4 Clam Anti-Virus ClamAV 0.96.3 Clam Anti-Virus ClamAV 0.96.2 Clam Anti-Virus ClamAV 0.96.1 Clam Anti-Virus ClamAV 0.95.2 Clam Anti-Virus ClamAV 0.95.1 Clam Anti-Virus ClamAV 0.94.2 Clam Anti-Virus ClamAV 0.94.1 Clam Anti-Virus ClamAV 0.93.3 Clam Anti-Virus ClamAV 0.93.1 Clam Anti-Virus ClamAV 0.92.1 Clam Anti-Virus ClamAV 0.91.2 Clam Anti-Virus ClamAV 0.91.1 Clam Anti-Virus ClamAV 0.90.3 Clam Anti-Virus ClamAV 0.90.2 Clam Anti-Virus ClamAV 0.90.1 Clam Anti-Virus ClamAV 0.90 Clam Anti-Virus ClamAV 0.88.5 Clam Anti-Virus ClamAV 0.88.4 Clam Anti-Virus ClamAV 0.88.3 Clam Anti-Virus ClamAV 0.88.2 Clam Anti-Virus ClamAV 0.88.1 Clam Anti-Virus ClamAV 0.87.1 Clam Anti-Virus ClamAV 0.87 -1 Clam Anti-Virus ClamAV 0.87 Clam Anti-Virus ClamAV 0.86.2 Clam Anti-Virus ClamAV 0.86 .1 Clam Anti-Virus ClamAV 0.86 Clam Anti-Virus ClamAV 0.85.1 Clam Anti-Virus ClamAV 0.85 Clam Anti-Virus ClamAV 0.84 rc2 Clam Anti-Virus ClamAV 0.84 rc1 Clam Anti-Virus ClamAV 0.84 Clam Anti-Virus ClamAV 0.83 Clam Anti-Virus ClamAV 0.82 Clam Anti-Virus ClamAV 0.81 Clam Anti-Virus ClamAV 0.80 rc4 Clam Anti-Virus ClamAV 0.80 rc3 Clam Anti-Virus ClamAV 0.80 rc2 Clam Anti-Virus ClamAV 0.80 rc1 Clam Anti-Virus ClamAV 0.80 Clam Anti-Virus ClamAV 0.75.1 Clam Anti-Virus ClamAV 0.70 Clam Anti-Virus ClamAV 0.68 -1 Clam Anti-Virus ClamAV 0.68 Clam Anti-Virus ClamAV 0.67 Clam Anti-Virus ClamAV 0.65 Clam Anti-Virus ClamAV 0.60 Clam Anti-Virus ClamAV 0.54 Clam Anti-Virus ClamAV 0.53 Clam Anti-Virus ClamAV 0.52 Clam Anti-Virus ClamAV 0.51 Clam Anti-Virus ClamAV 0.97.3 Clam Anti-Virus ClamAV 0.97.2 Clam Anti-Virus ClamAV 0.97 Clam Anti-Virus ClamAV 0.96 Clam Anti-Virus ClamAV 0.95 Clam Anti-Virus ClamAV 0.94 Clam Anti-Virus ClamAV 0.93 Clam Anti-Virus ClamAV 0.92 Clam Anti-Virus ClamAV 0.91 Clam Anti-Virus ClamAV 0.88.6 Clam Anti-Virus Antivirus 0.96.4 Apple Mac Os X Server 10.6.8 |
| Not Vulnerable: | |
Discussion
ClamAV Remote Code Execution And Denial of Service Vulnerabilities
ClamAV is prone to a remote code-execution vulnerability and a denial-of-service vulnerability.
Successfully exploiting these issues may allow an attacker to execute arbitrary code in the context of affected application or cause denial-of-service conditions.
ClamAV versions prior to 0.97.8 are vulnerable.
NOTE: This BID initially referenced CVE-2013-2021. This issue is now described in BID 60118.
ClamAV is prone to a remote code-execution vulnerability and a denial-of-service vulnerability.
Successfully exploiting these issues may allow an attacker to execute arbitrary code in the context of affected application or cause denial-of-service conditions.
ClamAV versions prior to 0.97.8 are vulnerable.
NOTE: This BID initially referenced CVE-2013-2021. This issue is now described in BID 60118.
Exploit / POC
ClamAV Remote Code Execution And Denial of Service Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
ClamAV Remote Code Execution And Denial of Service Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
ClamAV Remote Code Execution And Denial of Service Vulnerabilities
References:
References:
- Clam AntiVirus Homepage (ClamAV)
- ClamAV 0.97.8 has been released! (ClamAV)
- Re: Multiple potential security issues fixed in ClamAV 0.97.8 - any further deta (Felix Gröbert)
- About the security content of OS X Mountain Lion v10.8.5 and Security Update 201 (Apple)
- APPLE-SA-2013-09-17-1: About the security content of OS X Server v2.2.2 (Apple)