Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

clamav: denial of service

Package(s):

clamav

CVE #(s):

Created:

April 8, 2009

Updated:

April 8, 2009

Description:

From the Ubuntu advisory: It was discovered that ClamAV did not properly verify its input when processing TAR archives. A remote attacker could send a specially crafted TAR file and cause a denial of service via infinite loop.

Alerts:

Ubuntu

USN-754-1

2009-04-07

(Log in to post comments)