MGASA-2017-0291: clamav Mageia
Vulnerability summary
MGASA-2017-0291 is a vulnerability in clamav Mageia with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0Timeline
- 21-08-2017PublishedVulnerability first disclosed.
- 16-04-2026Last modifiedVulnerability information updated.
Description
Updated clamav packages fix security vulnerabilities It was discovered that ClamAV incorrectly handled parsing certain e-mail messages. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service (CVE-2017-6418). It was discovered that ClamAV incorrectly handled parsing certain PE files with WWPack compression. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service (CVE-2017-6420).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mageia2 products
- clamav< 0.99.2-1.1.mga5
- clamav< 0.99.2-2.2.mga6
1 vendor · 2 products