Denial of Service Vulnerability in ClamAV AntiVirus Software
CVE-2017-12379

9.8CRITICAL

Key Information:

Vendor

Debian
Status
Clamav Antivirus Software Versions 0.99.2 And Prior
Vendor
CVE Published:
26 January 2018

What is CVE-2017-12379?

ClamAV AntiVirus software versions 0.99.2 and earlier contain a vulnerability that could allow an unauthenticated, remote attacker to trigger a denial of service condition or potentially execute arbitrary code. This vulnerability arises from insufficient input validation during the message parsing process. An attacker could exploit the flaw by sending a specially crafted email designed to initiate a buffer overflow in the message handling function, which may result in the compromise of the affected system's stability or security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

ClamAV AntiVirus software 0.99.2 and prior ClamAV AntiVirus software versions 0.99.2 and prior

References

https://usn.ubuntu.com/3550-1/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3550-2/
vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018/01/msg0...
mailing-listx_refsource_MLIST

EPSS Score

8% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.