SUSE-SU-2018:0254-1 -- SLES clamavID: oval:org.secpod.oval:def:89002269 | Date: (C)2021-02-26 (M)2022-10-10 |
Class: PATCH | Family: unix |
This update for clamav fixes the following issues: - Update to security release 0.99.3 * CVE-2017-12376 * CVE-2017-12377 * CVE-2017-12379 - these vulnerabilities could have allowed an unauthenticated, remote attacker to cause a denial of service condition or potentially execute arbitrary code on an affected device. * CVE-2017-12374 * CVE-2017-12375 * CVE-2017-12378 * CVE-2017-12380 - these vulnerabilities could have allowed an unauthenticated, remote attacker to cause a denial of service condition on an affected device. * CVE-2017-6420 - this vulnerability could have allowed remote attackers to cause a denial of service via a crafted PE file with WWPack compression. * CVE-2017-6419 - ClamAV could have allowed remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CHM file. * CVE-2017-11423 - ClamAV could have allowed remote attackers to cause a denial of service via a crafted CAB file. * CVE-2017-6418 - ClamAV could have allowed remote attackers to cause a denial of service via a crafted e-mail message.
Platform: |
SUSE Linux Enterprise Server 11 SP4 |