WID-SEC-W-2025-0249

DeutschShown in its original language — a full translation is planned for a future version.

ClamAV: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2018-10-11

Ein lokaler Angreifer kann mehrere Schwachstellen in ClamAV ausnutzen, um einen Denial of Service Angriff durchzuführen.

describes (5)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-15378US	medium5.5	1.31% (71st)	—	2018-10-15
A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due to an error related to the MEW un…
CVE-2018-14682US	high8.8	3.61% (89th)	—	2018-07-28
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.
CVE-2018-14681US	high8.8	3.76% (90th)	—	2018-07-28
An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.
CVE-2018-14680US	medium6.5	3.71% (90th)	—	2018-07-28
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.
CVE-2018-14679US	medium6.5	3.27% (88th)	—	2018-07-28
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of…

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.