Patchwire CVEs, their patch status, and feeds to follow them

CVE-2009-1270

Fixed in a distro release EPSS 5%

libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang.

Published 2009-04-08 · CVE record · OSV

Products: clamav, debian_linux, canonical ubuntu_linux

Distro releases

ReleasePackageFixed in
Debian 12clamav0.95.1+dfsg-1
Debian 13clamav0.95.1+dfsg-1
Debian 14clamav0.95.1+dfsg-1
Debian 4.0clamav0.90.1dfsg-4etch19
Debian 5.0clamav0.94.dfsg.2-1lenny2