CVE-2017-12375

Priority
Medium
Description
The ClamAV AntiVirus software versions 0.99.2 and prior contain a
vulnerability that could allow an unauthenticated, remote attacker to cause
a denial of service (DoS) condition on an affected device. The
vulnerability is due to a lack of input validation checking mechanisms
during certain mail parsing functions (the rfc2047 function in mbox.c). An
unauthenticated, remote attacker could exploit this vulnerability by
sending a crafted email to the affected device. This action could cause a
buffer overflow condition when ClamAV scans the malicious email, allowing
the attacker to potentially cause a DoS condition on an affected device.
References
Bugs
Assigned-to
mdeslaur
Package
Upstream:released (0.99.3)
Ubuntu 12.04 ESM (Precise Pangolin):released (0.99.3+addedllvm-0ubuntu0.12.04.1)
Ubuntu 14.04 LTS (Trusty Tahr):released (0.99.3+addedllvm-0ubuntu0.14.04.1)
Ubuntu 16.04 LTS (Xenial Xerus):released (0.99.3+addedllvm-0ubuntu0.16.04.1)
Ubuntu 17.10 (Artful Aardvark):released (0.99.3+addedllvm-0ubuntu0.17.10.1)
Ubuntu 18.04 LTS (Bionic Beaver):released (0.99.3+addedllvm-0ubuntu1)
More Information

Updated: 2018-02-13 21:14:44 UTC (commit 14189)