Detections
Analytics
ClamAV < 0.98.5 Multiple Vulnerabilities
medium Nessus Plugin ID 79388
Language:
Synopsis
The antivirus service running on the remote host is affected by multiple denial of service vulnerabilities.Description
According to its version, the ClamAV clamd antivirus daemon on the remote host is prior to 0.98.5. It is, therefore, potentially affected by the following vulnerabilities :- An error exists related to using the 'clamscan -a' command to scan certain JavaScript files that could cause the application to crash. (CVE-2013-6497)
- Errors exist related to scanning maliciously crafted Yoda's Crypter files that could cause a heap-based buffer overflow or an application crash.
(CVE-2014-9050)
Solution
Upgrade to ClamAV 0.98.5 or later.See Also
https://blog.clamav.net/2014/11/clamav-0985-has-been-released.html
https://bugzilla.clamav.net/show_bug.cgi?id=11088
https://seclists.org/oss-sec/2014/q4/752
Plugin Details
Severity: Medium
ID: 79388
File Name: clamav_0_98_5.nasl
Version: 1.5
Type: Remote
Family: Misc.
Published: 11/21/2014
Updated: 11/25/2019
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.18
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS Score Source: CVE-2014-9050
Vulnerability Information
CPE: cpe:/a:clamav:clamav
Required KB Items: Antivirus/ClamAV/version, Settings/ParanoidReport
Exploit Ease: No known exploits are available
Patch Publication Date: 11/18/2014
Vulnerability Publication Date: 11/6/2014
Reference Information
CVE: CVE-2013-6497, CVE-2014-9050