A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an authenticated, local attacker to corrupt critical system files. The vulnerability is due to allowing the ClamD process to write to its log file while privileged without checking if the logfile has been replaced with a symbolic link. An attacker could exploit this vulnerability if they replace the ClamD log file with a symlink to a critical system file and then find a way to restart the ClamD process. An exploit could allow the attacker to corrupt a critical system file by appending ClamD log messages after restart.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-base" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-daemon" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-daemon-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-dbg" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-docs" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-freshclam" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-freshclam-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-milter" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-milter-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamav-testfiles" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamdscan" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "clamdscan-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "libclamav-dev" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "libclamav-dev-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "libclamav9" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1", "binary_name": "libclamav9-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-base" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-daemon" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-daemon-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-docs" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-freshclam" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-freshclam-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-milter" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-milter-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamav-testfiles" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamdscan" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "clamdscan-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "libclamav-dev" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "libclamav9" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1", "binary_name": "libclamav9-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-base" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-daemon" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-daemon-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-docs" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-freshclam" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-freshclam-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-milter" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-milter-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamav-testfiles" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamdscan" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "clamdscan-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "libclamav-dev" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "libclamav9" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.20.04.1", "binary_name": "libclamav9-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-base" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-daemon" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-daemon-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-docs" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-freshclam" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-freshclam-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-milter" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-milter-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamav-testfiles" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamdscan" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "clamdscan-dbgsym" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "libclamav-dev" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "libclamav9" }, { "binary_version": "0.103.12+dfsg-0ubuntu0.22.04.1", "binary_name": "libclamav9-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-base" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-daemon" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-daemon-dbgsym" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-dbgsym" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-doc" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-docs" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-freshclam" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-freshclam-dbgsym" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-milter" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-milter-dbgsym" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamav-testfiles" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamdscan" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "clamdscan-dbgsym" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "libclamav-dev" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "libclamav12" }, { "binary_version": "1.3.1+dfsg-5ubuntu2", "binary_name": "libclamav12-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-base" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-daemon" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-daemon-dbgsym" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-dbgsym" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-docs" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-freshclam" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-freshclam-dbgsym" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-milter" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-milter-dbgsym" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamav-testfiles" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamdscan" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "clamdscan-dbgsym" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "libclamav-dev" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "libclamav11t64" }, { "binary_version": "1.0.7+dfsg-0ubuntu0.24.04.1", "binary_name": "libclamav11t64-dbgsym" } ] }