| Package | Affected versions | Patched versions |
|---|---|---|
| anti-virus | = 3.4.6= 3.78= 3.78d= 3.79= 3.80= 3.81= 3.82= 3.83= 3.84= 3.85= 3.86= 3.90= 3.91= 3.95= 3.96.0= 4.03= 4.04= 4.05= 4.5.11= 4.5.12= 4.5.3= 4.5.4= 4.7.1= 4.7.2= 5.0.1= 5.0.2= 5.0.4= 5.0.9= 5.1= 5.2= 5.2.1= 6.5 | |
| scanning engine | = 2.30.4= 2.40.2 | |
| small business suite | = 4.04= 4.05 |
Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a "BZip bomb").
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free