ClamAV: Multiple vulnerabilities

ClamAV: Multiple vulnerabilities Multiple vulnerabilities have been found in ClamAV, the worst of which could lead to arbitrary code execution. clamav 2014-05-16 2014-05-16 462278 467710 remote 0.98 0.98

Clam AntiVirus (ClamAV) is an anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways.

Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details.

A remote attacker could send a specially crafted file, leading to arbitrary code execution or a Denial of Service condition.

There is no known workaround at this time.

All ClamAV users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.98"

CVE-2013-2020 CVE-2013-2021 CVE-2013-7087 CVE-2013-7088 CVE-2013-7089 creffett creffett