Description
Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) via unspecified vectors related to "error handling logic".
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/32030 ↗
- http://www.securityfocus.com/bid/31051 ↗
- http://secunia.com/advisories/31982 ↗
- http://www.securityfocus.com/bid/31681 ↗
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1141 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45057 ↗
- http://www.openwall.com/lists/oss-security/2008/09/04/13 ↗
- http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html ↗
- http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661 ↗
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:189 ↗
- http://www.openwall.com/lists/oss-security/2008/09/03/2 ↗
- https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html ↗
- http://secunia.com/advisories/32222 ↗
- http://security.gentoo.org/glsa/glsa-200809-18.xml ↗
- http://kolab.org/security/kolab-vendor-notice-22.txt ↗
- http://www.securitytracker.com/id?1020828 ↗
- http://www.debian.org/security/2008/dsa-1660 ↗
- http://secunia.com/advisories/32424 ↗
- http://www.vupen.com/english/advisories/2008/2780 ↗
- http://www.vupen.com/english/advisories/2008/2564 ↗
- http://secunia.com/advisories/32699 ↗
- http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html ↗
- http://support.apple.com/kb/HT3216 ↗
- http://secunia.com/advisories/31906 ↗
- https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html ↗
- http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog ↗