CVE-2009-1270

HOCH 7.8CVE-2009-1270 · Published 08/04/2009 · updated 16/06/2026

Kurz gesagt

CVE-2009-1270 ist eine Schwachstelle (HOCH (CVSS 7.8)) in clamav (clamav).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 5.1%, höher als bei 92.3% aller Schwachstellen.
Abhilfe: auf 0.95 oder neuer aktualisieren.

Package	Affected versions	Patched versions
clamav clamav	`< 0.95`	`0.95`

Description

libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang.

References

lists.apple.com/archives/security-announce/2009/Sep/msg00004.html · Mailing List
osvdb.org/53461 · Broken Link
secunia.com/advisories/34716 · Third Party Advisory
secunia.com/advisories/36701 · Third Party Advisory
support.apple.com/kb/HT3865 · Third Party Advisory
debian.org/security/2009/dsa-1771 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
openwall.com/lists/oss-security/2009/04/07/6 · Mailing List
securityfocus.com/bid/34357 · Third Party Advisory
ubuntu.com/usn/usn-754-1 · Third Party Advisory
vupen.com/english/advisories/2009/0934 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/49846 · Third Party Advisory
wwws.clamav.net/bugzilla/show_bug.cgi

Weitere Schwachstellen in clamav

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

clamav

< 0.95

0.95

Weitere Schwachstellen in clamav

Alle anzeigen →