CVE-2017-12380NULL Pointer Dereference in Clamav

Severity
7.5HIGHNVD
EPSS
13.2%
top 5.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 26
Latest updateMay 14

Description

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL point

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

debiandebian/clamav< clamav 0.99.3~beta2+dfsg-1 (bookworm)
Debianclamav/clamav< 0.99.3~beta2+dfsg-1+3
Ubuntuclamav/clamav< 0.99.3+addedllvm-0ubuntu0.14.04.1+1
NVDclamav/clamav0.99.2

Also affects: Debian Linux 7.0

🔴Vulnerability Details

3
GHSA
GHSA-cwqv-9665-6fh3: ClamAV AntiVirus software versions 02022-05-14
OSV
clamav vulnerabilities2018-01-30
OSV
CVE-2017-12380: ClamAV AntiVirus software versions 02018-01-26

📋Vendor Advisories

3
Ubuntu
ClamAV vulnerabilities2018-02-05
Ubuntu
ClamAV vulnerabilities2018-01-30
Debian
CVE-2017-12380: clamav - ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that...2017

💬Community

3
Bugzilla
CVE-2017-12374 CVE-2017-12375 CVE-2017-12376 CVE-2017-12377 CVE-2017-12378 CVE-2017-12379 CVE-2017-12380 clamav: Multiple vulnerabilities fixed in 0.99.3 [epel-all]2018-01-29
Bugzilla
CVE-2017-12374 CVE-2017-12375 CVE-2017-12376 CVE-2017-12377 CVE-2017-12378 CVE-2017-12379 CVE-2017-12380 clamav: Multiple vulnerabilities fixed in 0.99.32018-01-29
Bugzilla
CVE-2017-12374 CVE-2017-12375 CVE-2017-12376 CVE-2017-12377 CVE-2017-12378 CVE-2017-12379 CVE-2017-12380 clamav: Multiple vulnerabilities fixed in 0.99.3 [fedora-all]2018-01-29