CVE-2018-0360 PUBLISHED

ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3_paragraph() in libclamav/hwp.c.

EPSS 1.21% · 78.9th percentile

Risk Scores

EPSS Score
1.21%
78.9th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSclamav0, 0.97.8+dfsg-1ubuntu4, 0.97.8+dfsg-1ubuntu5
Ubuntu:16.04:LTSclamav0, 0.98.7+dfsg-0ubuntu4, 0.98.7+dfsg-0ubuntu5
Ubuntu:18.04:LTSclamav0, 0.99.2+dfsg-6ubuntu2, 0.99.3~beta1+dfsg-2ubuntu1

Timeline

References

Open in Interactive Console →