Fluid Attacks Database

Description

ClamAV versions prior to 0.101.2 are susceptible to a denial of service (DoS) vulnerability. An out-of-bounds heap read condition may occur when scanning PE files. An example is Windows EXE and DLL files that have been packed using Aspack as a result of inadequate bound-checking.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
alpine v3.11	clamav	>=0 <0.100.3-r0	0.100.3-r0
alpine v3.13	clamav	>=0 <0.100.3-r0	0.100.3-r0
alpine v3.12	clamav	>=0 <0.100.3-r0	0.100.3-r0
alpine v3.10	clamav	>=0 <0.100.3-r0	0.100.3-r0
alpine v3.6	clamav	>=0 <0.100.3-r0	0.100.3-r0
alpine v3.7	clamav	>=0 <0.100.3-r0	0.100.3-r0
alpine v3.9	clamav	>=0 <0.100.3-r0	0.100.3-r0
debian 12	clamav	>=0 <0.101.2+dfsg-1	0.101.2+dfsg-1
debian 13	clamav	>=0 <0.101.2+dfsg-1	0.101.2+dfsg-1
debian 14	clamav	>=0 <0.101.2+dfsg-1	0.101.2+dfsg-1

1-10 of 11

Aliases

1. CVE-2019-17892. NVD-2019-17893. OSV-ALPINE-2019-17894. OSV-2019-17895. OSV-DEBIAN-2019-17896. SECURITY-CVE-2019-17897. SECURITY-TRACKER-CVE-2019-1789

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.