FreeBSD Bugzilla – Attachment 203174 Details for
Bug 236816
security/vuxml: Document ClamAV vulnerability.
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
Patch file
security_vuxml.patch (text/plain), 2.66 KB, created by
Yasuhiro Kimura
on 2019-03-26 23:32:20 UTC
(
hide
)
Description:
Patch file
Filename:
MIME Type:
Creator:
Yasuhiro Kimura
Created:
2019-03-26 23:32:20 UTC
Size:
2.66 KB
patch
obsolete
>Index: vuln.xml >=================================================================== >--- vuln.xml (revision 496920) >+++ vuln.xml (working copy) >@@ -58,6 +58,48 @@ > * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) > --> > <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> >+ <vuln vid="e28e3e9d-501a-11e9-8bda-9c5c8e75236a"> >+ <topic>clamav -- multiple vulnerabilities</topic> >+ <affects> >+ <package> >+ <name>clamav</name> >+ <range><lt>0.101.2,1</lt></range> >+ </package> >+ <package> >+ <name>clamav-milter</name> >+ <range><lt>0.101.2,1</lt></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>Micah Snyder reports:</p> >+ <blockquote cite="https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html"> >+ <ul> >+ <li>CVE-2019-1785: A path-traversal write condition may occur as a result of improper input validation when scanning RAR archives. Issue reported by aCaB.</li> >+ <li>CVE-2019-1786: An out-of-bounds heap read condition may occur when scanning malformed PDF documents as a result of improper bounds-checking</li> >+ <li>CVE-2019-1787: An out-of-bounds heap read condition may occur when scanning PDF documents. The defect is a failure to correctly keep track of the number of bytes remaining in a buffer when indexing file data.</li> >+ <li>CVE-2019-1788: An out-of-bounds heap write condition may occur when scanning OLE2 files such as Microsoft Office 97-2003 documents. The invalid write happens when an invalid pointer is mistakenly used to initialize a 32bit integer to zero. This is likely to crash the application.</li> >+ <li>CVE-2019-1789: An out-of-bounds heap read condition may occur when scanning PE files (i.e. Windows EXE and DLL files) that have been packed using Aspack as a result of inadequate bound-checking.</li> >+ <li>CVE-2019-1798: A use-after-free condition may occur as a result of improper error handling when scanning nested RAR archives. Issue reported by David L.</li> >+ </ul> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html</url> >+ <cvename>CVE-2019-1785</cvename> >+ <cvename>CVE-2019-1786</cvename> >+ <cvename>CVE-2019-1787</cvename> >+ <cvename>CVE-2019-1788</cvename> >+ <cvename>CVE-2019-1789</cvename> >+ <cvename>CVE-2019-1798</cvename> >+ </references> >+ <dates> >+ <discovery>2019-03-26</discovery> >+ <entry>2019-03-26</entry> >+ </dates> >+ </vuln> >+ > <vuln vid="d74371d2-4fee-11e9-a5cd-1df8a848de3d"> > <topic>Python -- NULL pointer dereference vulnerability</topic> > <affects>
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 236816
: 203174