CVE-2018-0360
ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3_paragraph() in libclamav/hwp.c.
| Software | From | Fixed in |
|---|---|---|
| clamav / clamav | - | 0.100.1 |
| canonical / ubuntu_linux | 16.04 | 16.04.x |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| canonical / ubuntu_linux | 12.04 | 12.04.x |
| canonical / ubuntu_linux | 18.04 | 18.04.x |
| debian / debian_linux | 8.0 | 8.0.x |
- http://www.securitytracker.com/id/1041367
- https://blog.clamav.net/2018/07/clamav-01001-has-been-released.html
- https://lists.debian.org/debian-lts-announce/2018/08/msg00020.html
- https://secuniaresearch.flexerasoftware.com/secunia_research/2018-12/
- https://security.gentoo.org/glsa/201904-12
- https://usn.ubuntu.com/3722-1/
- https://usn.ubuntu.com/3722-2/
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime