CVE-2009-1270
Fixed in a distro release EPSS 5%
libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang.
Products: clamav, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | clamav | 0.95.1+dfsg-1 |
| Debian 13 | clamav | 0.95.1+dfsg-1 |
| Debian 14 | clamav | 0.95.1+dfsg-1 |
| Debian 4.0 | clamav | 0.90.1dfsg-4etch19 |
| Debian 5.0 | clamav | 0.94.dfsg.2-1lenny2 |