A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an authenticated, local attacker to corrupt critical system files. The vulnerability is due to allowing the ClamD process to write to its log file while privileged without checking if the logfile has been replaced with a symbolic link. An attacker could exploit this vulnerability if they replace the ClamD log file with a symlink to a critical system file and then find a way to restart the ClamD process. An exploit could allow the attacker to corrupt a critical system file by appending ClamD log messages after restart.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "clamav", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "clamav-base", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "clamav-daemon", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "clamav-daemon-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "clamav-dbg", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "clamav-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "clamav-docs", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "clamav-freshclam", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "clamav-freshclam-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "clamav-milter", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "clamav-milter-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "clamav-testfiles", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "clamdscan", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "clamdscan-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "libclamav-dev", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "libclamav-dev-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "libclamav9", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" }, { "binary_name": "libclamav9-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "clamav", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "clamav-base", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "clamav-daemon", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "clamav-daemon-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "clamav-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "clamav-docs", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "clamav-freshclam", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "clamav-freshclam-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "clamav-milter", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "clamav-milter-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "clamav-testfiles", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "clamdscan", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "clamdscan-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "libclamav-dev", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "libclamav9", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" }, { "binary_name": "libclamav9-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "clamav", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "clamav-base", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "clamav-daemon", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "clamav-daemon-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "clamav-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "clamav-docs", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "clamav-freshclam", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "clamav-freshclam-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "clamav-milter", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "clamav-milter-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "clamav-testfiles", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "clamdscan", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "clamdscan-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "libclamav-dev", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "libclamav9", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" }, { "binary_name": "libclamav9-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "clamav", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "clamav-base", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "clamav-daemon", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "clamav-daemon-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "clamav-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "clamav-docs", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "clamav-freshclam", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "clamav-freshclam-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "clamav-milter", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "clamav-milter-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "clamav-testfiles", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "clamdscan", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "clamdscan-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "libclamav-dev", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "libclamav9", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" }, { "binary_name": "libclamav9-dbgsym", "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "clamav", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "clamav-base", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "clamav-daemon", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "clamav-daemon-dbgsym", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "clamav-dbgsym", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "clamav-docs", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "clamav-freshclam", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "clamav-freshclam-dbgsym", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "clamav-milter", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "clamav-milter-dbgsym", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "clamav-testfiles", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "clamdscan", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "clamdscan-dbgsym", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "libclamav-dev", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "libclamav11t64", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" }, { "binary_name": "libclamav11t64-dbgsym", "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "clamav", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "clamav-base", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "clamav-daemon", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "clamav-daemon-dbgsym", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "clamav-dbgsym", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "clamav-doc", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "clamav-docs", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "clamav-freshclam", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "clamav-freshclam-dbgsym", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "clamav-milter", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "clamav-milter-dbgsym", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "clamav-testfiles", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "clamdscan", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "clamdscan-dbgsym", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "libclamav-dev", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "libclamav12", "binary_version": "1.3.1+dfsg-5ubuntu2" }, { "binary_name": "libclamav12-dbgsym", "binary_version": "1.3.1+dfsg-5ubuntu2" } ] }