MDVSA-2011:122

Package name
clamav
Date
2011-08-13
Advisory ID
MDVSA-2011:122
Affected versions
2009.0 x86_64 , MES5 i586 , 2009.0 i586 , CS4.0 i586 , CS4.0 x86_64 , MES5 x86_64

Problem description

A vulnerability has been discovered and corrected in clamav:

Off-by-one error in the cli_hm_scan function in matcher-hash.c in
libclamav in ClamAV before 0.97.2 allows remote attackers to cause
a denial of service (daemon crash) via an e-mail message that is not
properly handled during certain hash calculations (CVE-2011-2721).

Packages for 2009.0 are provided as of the Extended Maintenance
Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&products_id=490

The updated packages have been upgraded to the 0.97.2 version which
is not vulnerable to this issue.

Updated packages

2009.0 x86_64

 4877825cdeb161e436d595008b12e54e  2009.0/x86_64/clamav-0.97.2-0.1mdv2009.0.x86_64.rpm
 83fd711fd9cb6098caa12e3dd8b04861  2009.0/x86_64/clamav-db-0.97.2-0.1mdv2009.0.x86_64.rpm
 c8c5a1c8b3ed2566499fbf8775dd1f14  2009.0/x86_64/clamav-milter-0.97.2-0.1mdv2009.0.x86_64.rpm
 604472dc9c7611f33ae389c6cff8a475  2009.0/x86_64/clamd-0.97.2-0.1mdv2009.0.x86_64.rpm
 ca1803776288eb8199d60bbfde107f62  2009.0/x86_64/lib64clamav6-0.97.2-0.1mdv2009.0.x86_64.rpm
 62393252d6981a4ae5c5a4c02214d982  2009.0/x86_64/lib64clamav-devel-0.97.2-0.1mdv2009.0.x86_64.rpm 
 513e2dca87720333d1cb1ae1e0a2e6f0  2009.0/SRPMS/clamav-0.97.2-0.1mdv2009.0.src.rpm

MES5 i586

 24ea4782369c61e5f6dd924749e4f271  mes5/i586/clamav-0.97.2-0.1mdvmes5.2.i586.rpm
 5433b7d49b02f20c30b966babd7975b7  mes5/i586/clamav-db-0.97.2-0.1mdvmes5.2.i586.rpm
 e8621ba754ed38f6f5538c6ba51fd376  mes5/i586/clamav-milter-0.97.2-0.1mdvmes5.2.i586.rpm
 5fc4b6714b6a0b739ac446b4e43629c2  mes5/i586/clamd-0.97.2-0.1mdvmes5.2.i586.rpm
 468b0fab2b7c26ece26feb4ed06c9655  mes5/i586/libclamav6-0.97.2-0.1mdvmes5.2.i586.rpm
 7bfab165b2e12722845a8a4380c01e74  mes5/i586/libclamav-devel-0.97.2-0.1mdvmes5.2.i586.rpm 
 bdf606aba644551526a3e7fd7a9f4cb7  mes5/SRPMS/clamav-0.97.2-0.1mdvmes5.2.src.rpm

2009.0 i586

 77f4504db93c430be3f120f7bb4d05d0  2009.0/i586/clamav-0.97.2-0.1mdv2009.0.i586.rpm
 7b4b79d25466c5f7cd8ee774a620e9dd  2009.0/i586/clamav-db-0.97.2-0.1mdv2009.0.i586.rpm
 0b9bae5d23eb3e6332a86ad6dc5c5d41  2009.0/i586/clamav-milter-0.97.2-0.1mdv2009.0.i586.rpm
 e99f5a732875b26df8514927b7291904  2009.0/i586/clamd-0.97.2-0.1mdv2009.0.i586.rpm
 660b8d3a3da6974ce3e82f94acace341  2009.0/i586/libclamav6-0.97.2-0.1mdv2009.0.i586.rpm
 624c202bae7afe44ce9f7e160da5dade  2009.0/i586/libclamav-devel-0.97.2-0.1mdv2009.0.i586.rpm 
 513e2dca87720333d1cb1ae1e0a2e6f0  2009.0/SRPMS/clamav-0.97.2-0.1mdv2009.0.src.rpm

CS4.0 i586

 b108390f2c3829e824b77bb846186989  corporate/4.0/i586/clamav-0.97.2-0.1.20060mlcs4.i586.rpm
 9efcaa71743b0917decdc8b1d07afb03  corporate/4.0/i586/clamav-db-0.97.2-0.1.20060mlcs4.i586.rpm
 40ee3ac7457772673fb98c2d9d45addc  corporate/4.0/i586/clamav-milter-0.97.2-0.1.20060mlcs4.i586.rpm
 43b9ce3c2acfba1e887ade94eb20fd59  corporate/4.0/i586/clamd-0.97.2-0.1.20060mlcs4.i586.rpm
 1376bea544084db0230e3cdc6678f76f  corporate/4.0/i586/libclamav6-0.97.2-0.1.20060mlcs4.i586.rpm
 3ba253205bc900bc8b8f71c9aba016a8  corporate/4.0/i586/libclamav-devel-0.97.2-0.1.20060mlcs4.i586.rpm 
 e471c5537233014d766e79d4906eb30e  corporate/4.0/SRPMS/clamav-0.97.2-0.1.20060mlcs4.src.rpm

CS4.0 x86_64

 32df8ca5a0beb14cdfe6df8a7565e414  corporate/4.0/x86_64/clamav-0.97.2-0.1.20060mlcs4.x86_64.rpm
 a07053ea2f81bb7166e2f8fdcf89cbad  corporate/4.0/x86_64/clamav-db-0.97.2-0.1.20060mlcs4.x86_64.rpm
 cc6da5f248d325846e936836fd5a2d93  corporate/4.0/x86_64/clamav-milter-0.97.2-0.1.20060mlcs4.x86_64.rpm
 9e75615b32b7d7dad319c113ce9b769b  corporate/4.0/x86_64/clamd-0.97.2-0.1.20060mlcs4.x86_64.rpm
 0aa2fab77179d3e163372e407be8189d  corporate/4.0/x86_64/lib64clamav6-0.97.2-0.1.20060mlcs4.x86_64.rpm
 9ccf4ad734fd1ee43ac04fedface3967  corporate/4.0/x86_64/lib64clamav-devel-0.97.2-0.1.20060mlcs4.x86_64.rpm 
 e471c5537233014d766e79d4906eb30e  corporate/4.0/SRPMS/clamav-0.97.2-0.1.20060mlcs4.src.rpm

MES5 x86_64

 26ce7a89e663e67f8c7d27dce7ae42ec  mes5/x86_64/clamav-0.97.2-0.1mdvmes5.2.x86_64.rpm
 90a45115d5855bacae431e56e794d385  mes5/x86_64/clamav-db-0.97.2-0.1mdvmes5.2.x86_64.rpm
 fea9cbae37e4e2126800b77bdc50475f  mes5/x86_64/clamav-milter-0.97.2-0.1mdvmes5.2.x86_64.rpm
 778ae274a66d7c762bbe7c868cbf4568  mes5/x86_64/clamd-0.97.2-0.1mdvmes5.2.x86_64.rpm
 4678aed0a42fecf2628a7a1bedfed0aa  mes5/x86_64/lib64clamav6-0.97.2-0.1mdvmes5.2.x86_64.rpm
 4529587b92ecbc6a50c8a2f661915cff  mes5/x86_64/lib64clamav-devel-0.97.2-0.1mdvmes5.2.x86_64.rpm 
 bdf606aba644551526a3e7fd7a9f4cb7  mes5/SRPMS/clamav-0.97.2-0.1mdvmes5.2.src.rpm

References