Vulnetix
Try Vulnetix Request Demo
CVE-2019-1785 REJECTED

A vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of proper error-handling mechanisms when processing nested RAR files sent to an affected device. An attacker could exploit this vulnerability by sending a crafted RAR file to an affected device. An exploit could allow the attacker to view or create arbitrary files on the targeted system.

EPSS 0.30% · 53.4th percentile

Risk Scores

EPSS Score
0.30%
53.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibclamunrar0, 0.99-1ubuntu0.1, 0.99-1
Ubuntu:18.04:LTSlibclamunrar0.99-4ubuntu1, 0
Ubuntu:14.04:LTSlibclamunrar0.96.4-1, 0.99-0ubuntu0.14.04.2, 0.99-0ubuntu0.14.04.1
Ubuntu:16.04:LTSclamav0.99.2+dfsg-0ubuntu0.16.04.3, 0, 0.98.7+dfsg-0ubuntu4
Ubuntu:14.04:LTSclamav0.98.1+dfsg-4ubuntu1.1, 0.100.1+dfsg-1ubuntu0.14.04.1, 0.100.1+dfsg-1ubuntu0.14.04.2
Ubuntu:18.04:LTSclamav0, 0.99.2+dfsg-6ubuntu2, 0.99.3~beta1+dfsg-2ubuntu1

Timeline

References

Open in Interactive Console →