CVE-2016-1405
Fixed in a distro release EPSS 3%
libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service (AMP process restart) via a crafted document, aka Bug IDs CSCuv78533 and CSCuw60503.
Products: clamav, cisco email_security_appliance, cisco web_security_appliance
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | clamav-1.0 | 0 |
| Chainguard | clamav-1.4 | 0 |
| Chainguard | clamav-1.5 | 1.5.1-r0 |
| Debian 12 | clamav | 0.99+dfsg-1 |
| Debian 13 | clamav | 0.99+dfsg-1 |
| Debian 14 | clamav | 0.99+dfsg-1 |
| Ubuntu 14.04 LTS | clamav | 0.99.2+addedllvm-0ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | clamav | 0.99.2+dfsg-0ubuntu0.16.04.1 |
| Wolfi | clamav-1.4 | 0 |
| Wolfi | clamav-1.5 | 1.5.1-r0 |