CVE-2016-1371

ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
VendorProductVersion
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
clamavclamav
𝑥
≤ 0.99.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
clamav
bullseye
0.103.10+dfsg-0+deb11u1
fixed
bookworm
1.0.5+dfsg-1~deb12u1
fixed
sid
1.4.1+dfsg-1
fixed
trixie
1.4.1+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
clamav
xenial
Fixed 0.99.2+dfsg-0ubuntu0.16.04.1
released
wily
ignored
trusty
Fixed 0.99.2+addedllvm-0ubuntu0.14.04.1
released
precise
Fixed 0.99.2+addedllvm-0ubuntu0.12.04.1
released
Common Weakness Enumeration
References
http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html
http://www.securityfocus.com/bid/93222
http://www.ubuntu.com/usn/USN-3093-1
https://bugzilla.clamav.net/show_bug.cgi?id=11514
https://foxglovesecurity.com/2016/06/13/finding-pearls-fuzzing-clamav/
http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html
http://www.securityfocus.com/bid/93222
http://www.ubuntu.com/usn/USN-3093-1
https://bugzilla.clamav.net/show_bug.cgi?id=11514
https://foxglovesecurity.com/2016/06/13/finding-pearls-fuzzing-clamav/