Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.842092
Category:Ubuntu Local Security Checks
Title:Ubuntu: Security Advisory (USN-2488-2)
Summary:The remote host is missing an update for the 'clamav' package(s) announced via the USN-2488-2 advisory.
Description:Summary:
The remote host is missing an update for the 'clamav' package(s) announced via the USN-2488-2 advisory.

Vulnerability Insight:
USN-2488-1 fixed a vulnerability in ClamAV for Ubuntu 14.10, Ubuntu
14.04 LTS, and Ubuntu 12.04 LTS. This update provides the corresponding
update for Ubuntu 10.04 LTS.

Original advisory details:

Sebastian Andrzej Siewior discovered that ClamAV incorrectly handled
certain upack packer files. An attacker could possibly use this issue to
cause ClamAV to crash, resulting in a denial of service, or possibly
execute arbitrary code.

Affected Software/OS:
'clamav' package(s) on Ubuntu 10.04.

Solution:
Please install the updated package(s).

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2013-6497
59645
http://secunia.com/advisories/59645
60150
http://secunia.com/advisories/60150
71178
http://www.securityfocus.com/bid/71178
FEDORA-2014-15463
http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144979.html
FEDORA-2014-15473
http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144754.html
MDVSA-2014:217
http://www.mandriva.com/security/advisories?name=MDVSA-2014:217
SUSE-SU-2014:1571
http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html
SUSE-SU-2014:1574
http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00007.html
USN-2423-1
http://www.ubuntu.com/usn/USN-2423-1
USN-2488-2
http://www.ubuntu.com/usn/USN-2488-2
[oss-security] 20141118 Fwd: [Clamav-devel] ClamAV(R) blog: ClamAV 0.98.5 has been released!
http://www.openwall.com/lists/oss-security/2014/11/19/2
[oss-security] 20141118 Re: Fwd: [Clamav-devel] ClamAV(R) blog: ClamAV 0.98.5 has been released!
http://www.openwall.com/lists/oss-security/2014/11/19/5
clamv-cve20136497os(98804)
https://exchange.xforce.ibmcloud.com/vulnerabilities/98804
http://blog.clamav.net/2014/11/clamav-0985-has-been-released.html
https://bugzilla.clamav.net/show_bug.cgi?id=11088
https://bugzilla.redhat.com/show_bug.cgi?id=1138101
openSUSE-SU-2014:1560
http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00003.html
Common Vulnerability Exposure (CVE) ID: CVE-2014-9328
BugTraq ID: 72372
http://www.securityfocus.com/bid/72372
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148950.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148958.html
https://security.gentoo.org/glsa/201512-08
http://securitytracker.com/id/1031672
http://secunia.com/advisories/62536
http://secunia.com/advisories/62757
SuSE Security Announcement: SUSE-SU-2015:0298 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html
SuSE Security Announcement: openSUSE-SU-2015:0285 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html
SuSE Security Announcement: openSUSE-SU-2015:0906 (Google Search)
http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html
CopyrightCopyright (C) 2015 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.