Clam AntiVirus: Multiple vulnerabilities

1. Gentoo Linux Security Advisory

Package	Vulnerable versions	Unaffected versions	Architecture(s)
app-antivirus/clamav	< 0.96.1	>= 0.96.1	All supported architectures

Related bugreports: #314087, #321157

Multiple vulnerabilities have been reported in Clam AntiVirus.

2. Impact Information

Clam AntiVirus (short: ClamAV) is an anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.

Multiple vulnerabilities were discovered in Clam AntiVirus. For further information, please consult the CVE entries referenced below.

A remote attacker could possibly bypass virus detection or cause a Denial of Service.

3. Resolution Information

There is no known workaround at this time.

All Clam AntiVirus users should upgrade to the latest version:

Code Listing 3.1: Resolution

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.96.1"

4. References

Page updated September 07, 2010

Summary: This is a Gentoo Linux Security Advisory

Security Team
Contact Address

Donate to support our development efforts.