VDB
CVE-2019-1786
CVE-2019-1786
REJECTED
A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of proper data handling mechanisms within the device buffer while indexing remaining file data on an affected device. An attacker could exploit this vulnerability by sending crafted PDF files to an affected device. A successful exploit could allow the attacker to cause an out-of-bounds read condition, resulting in a crash that could result in a denial of service condition on an affected device.
EPSS 2.79% · 86.4th percentile
Risk Scores
EPSS Score
2.79%
86.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | clamav | 0.99.2+dfsg-6ubuntu2, *, 0 |
| Ubuntu:14.04:LTS | clamav | *, 0.98.1+dfsg-4ubuntu1, 0.98.1+dfsg-4ubuntu1.1 |
| Ubuntu:16.04:LTS | clamav | *, *, * |
Timeline
- Apr 8, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
- Jan 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2019-1786 third-party-advisory
- https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2019-1786 third-party-advisory