oss-security - CVE request: clamav clamd and clamscan DoS and bypass by malformated archive

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 7 Apr 2009 14:08:15 +0200
From: Thomas Biege <thomas@...e.de>
To: oss-security@...ts.openwall.com
Subject: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive


These two bugs possibly need a CVE-ID.

Here we go:

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1462

http://blog.zoller.lu/2009/04/clamav-094-and-below-evasion-and-bypass.html


-- 
Bye,
     Thomas
-- 
 Thomas Biege <thomas@...e.de>, SUSE LINUX, Security Support & Auditing
 SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)
-- 
           Hamming's Motto:
           The purpose of computing is insight, not numbers.
                                -- Richard W. Hamming

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.