A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an out of bounds read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. An exploit could allow the attacker to terminate the scanning process.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-base" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-daemon" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-daemon-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-dbg" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-docs" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-freshclam" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-freshclam-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-milter" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-milter-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-testfiles" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamdscan" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamdscan-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "libclamav-dev" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "libclamav-dev-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "libclamav9" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "libclamav9-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-base" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-daemon" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-daemon-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-docs" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-freshclam" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-freshclam-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-milter" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-milter-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-testfiles" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamdscan" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamdscan-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "libclamav-dev" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "libclamav9" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "libclamav9-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-base" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-daemon" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-daemon-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-docs" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-freshclam" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-freshclam-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-milter" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-milter-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-testfiles" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamdscan" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamdscan-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "libclamav-dev" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "libclamav9" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "libclamav9-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-base" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-daemon" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-daemon-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-docs" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-freshclam" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-freshclam-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-milter" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-milter-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-testfiles" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamdscan" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamdscan-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "libclamav-dev" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "libclamav9" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "libclamav9-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-base" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-daemon" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-daemon-dbgsym" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-dbgsym" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-doc" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-docs" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-freshclam" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-freshclam-dbgsym" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-milter" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-milter-dbgsym" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-testfiles" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamdscan" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamdscan-dbgsym" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "libclamav-dev" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "libclamav12" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "libclamav12-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-base" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-daemon" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-daemon-dbgsym" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-dbgsym" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-docs" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-freshclam" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-freshclam-dbgsym" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-milter" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-milter-dbgsym" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-testfiles" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamdscan" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamdscan-dbgsym" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "libclamav-dev" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "libclamav11t64" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "libclamav11t64-dbgsym" } ] }