USN-4918-3: clamav Ubuntu
Vulnerability summary
USN-4918-3 is a vulnerability in clamav Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 0 · Downstream 0 · Related 3Timeline
- 03-05-2021PublishedVulnerability first disclosed.
- 29-06-2026Last modifiedVulnerability information updated.
Description
clamav regression USN-4918-1 fixed vulnerabilities in ClamAV. The updated package could fail to properly scan in some situations. This update fixes the problem. Original advisory details: It was discovered that ClamAV incorrectly handled parsing Excel documents. A remote attacker could possibly use this issue to cause ClamAV to hang, resulting in a denial of service. (CVE-2021-1252) It was discovered that ClamAV incorrectly handled parsing PDF documents. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2021-1404) It was discovered that ClamAV incorrectly handled parsing email. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2021-1405)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- clamav< 0.103.2+dfsg-0ubuntu0.14.04.1+esm2 | < 0.103.2+dfsg-0ubuntu0.16.04.1+esm1 | < 0.103.2+dfsg-0ubuntu0.18.04.2 | < 0.103.2+dfsg-0ubuntu0.20.04.2
1 vendor · 1 product