sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] Clam AntiVirus : Denial of Service vulnerability

From: Thomas Houssin <Thomas.Houssin AT gmail.com>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] Clam AntiVirus : Denial of Service vulnerability
Date: Mon, 27 Jun 2005 21:10:28 +0200

Synopsis
========
Clam AntiVirus is vulnerable to a Denial of Service attack when
processing certain Quantum archives.

Background
==========
Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose
of this software is the integration with mail servers (attachment
scanning). The package provides a flexible and scalable multi-threaded
daemon, a commandline scanner, and a tool for automatic updating via
Internet.

Description
===========
Reported by Andrew Toller and Stefan Kanthak: a flaw in libmspack's
Quantum archive decompressor renders (libclamav/mspack/qtmd.c) can cause
a crash.

Affected packages
=================
clamav in stable-rc and stable is affected.
This is now fixed in all grimoires (clamav updated to 0.86.1).

Resolution
==========
All clamav users should upgrade to the latest available version:
# scribe update
# cast -c clamav

References
==========
[ 1 ] Release Notes
http://sourceforge.net/project/shownotes.php?release_id=337279
[ 2 ] GLSA 200506-23
http://security.gentoo.org/glsa/glsa-200506-23.xml

--
Thomas Houssin

Security Team Leader Source Mage GNU/Linux (http://www.sourcemage.org)
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature

[SM-Security] Clam AntiVirus : Denial of Service vulnerability, Thomas Houssin, 06/27/2005