USN-4918-3
clamav regression
USN-4918-1 fixed vulnerabilities in ClamAV. The updated package could fail to properly scan in some situations. This update fixes the problem.
Original advisory details:
It was discovered that ClamAV incorrectly handled parsing Excel documents. A remote attacker could possibly use this issue to cause ClamAV to hang, resulting in a denial of service. (CVE-2021-1252)
It was discovered that ClamAV incorrectly handled parsing PDF documents. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2021-1404)
It was discovered that ClamAV incorrectly handled parsing email. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2021-1405)
What each source reports
OSV No score
clamav regression
USN-4918-1 fixed vulnerabilities in ClamAV. The updated package could fail to properly scan in some situations. This update fixes the problem.
Original advisory details:
It was discovered that ClamAV incorrectly handled parsing Excel documents. A remote attacker could possibly use this issue to cause ClamAV to hang, resulting in a denial of service. (CVE-2021-1252)
It was discovered that ClamAV incorrectly handled parsing PDF documents. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2021-1404)
It was discovered that ClamAV incorrectly handled parsing email. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2021-1405)
- Record
USN-4918-3- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clamavUbuntu:Pro:14.04:LTS |
before 0.103.2+dfsg-0ubuntu0.14.04.1+esm2, plus listed versions 0.97.8+dfsg-1ubuntu40.97.8+dfsg-1ubuntu50.98.1+dfsg-1ubuntu40.98.1+dfsg-1ubuntu50.98.1+dfsg-2ubuntu2 Show 23 moreShow less0.98.1+dfsg-4ubuntu10.98.1+dfsg-4ubuntu1.10.98.5+addedllvm-0ubuntu0.14.04.10.98.6+dfsg-0ubuntu0.14.04.10.98.7+dfsg-0ubuntu0.14.04.10.99.2+addedllvm-0ubuntu0.14.04.10.99.2+addedllvm-0ubuntu0.14.04.20.99.3+addedllvm-0ubuntu0.14.04.10.99.4+addedllvm-0ubuntu0.14.04.10.100.1+dfsg-1ubuntu0.14.04.10.100.1+dfsg-1ubuntu0.14.04.20.100.1+dfsg-1ubuntu0.14.04.30.100.1+dfsg-1ubuntu0.14.04.40.100.2+dfsg-1ubuntu0.14.04.10.100.2+dfsg-1ubuntu0.14.04.20.100.3+dfsg-0ubuntu0.14.04.10.100.3+dfsg-0ubuntu0.14.04.1+esm10.101.4+dfsg-0ubuntu0.14.04.1+esm10.102.1+dfsg-0ubuntu0.14.04.1+esm10.102.2+dfsg-0ubuntu0.14.04.1+esm10.102.3+dfsg-0ubuntu0.14.04.1+esm10.102.4+dfsg-0ubuntu0.14.04.1+esm10.103.2+dfsg-0ubuntu0.14.04.1+esm1 |
0.103.2+dfsg-0ubuntu0.14.04.1+esm2 |
clamavUbuntu:Pro:16.04:LTS |
before 0.103.2+dfsg-0ubuntu0.16.04.1+esm1, plus listed versions 0.98.7+dfsg-0ubuntu40.98.7+dfsg-0ubuntu50.99+dfsg-1ubuntu10.99+dfsg-1ubuntu1.10.99+dfsg-1ubuntu1.2 Show 16 moreShow less0.99.2+dfsg-0ubuntu0.16.04.10.99.2+dfsg-0ubuntu0.16.04.20.99.2+dfsg-0ubuntu0.16.04.30.99.3+addedllvm-0ubuntu0.16.04.10.99.4+addedllvm-0ubuntu0.16.04.10.100.1+dfsg-1ubuntu0.16.04.10.100.1+dfsg-1ubuntu0.16.04.20.100.1+dfsg-1ubuntu0.16.04.30.100.2+dfsg-1ubuntu0.16.04.10.100.3+dfsg-0ubuntu0.16.04.10.101.4+dfsg-0ubuntu0.16.04.10.102.1+dfsg-0ubuntu0.16.04.20.102.2+dfsg-0ubuntu0.16.04.10.102.3+dfsg-0ubuntu0.16.04.10.102.4+dfsg-0ubuntu0.16.04.10.103.2+dfsg-0ubuntu0.16.04.1 |
0.103.2+dfsg-0ubuntu0.16.04.1+esm1 |
clamavUbuntu:18.04:LTS |
before 0.103.2+dfsg-0ubuntu0.18.04.2, plus listed versions 0.99.2+dfsg-6ubuntu20.99.3~beta1+dfsg-2ubuntu10.99.3~beta1+dfsg-2ubuntu20.99.3+addedllvm-0ubuntu10.99.3+addedllvm-0ubuntu2 Show 12 moreShow less0.99.4+addedllvm-0ubuntu10.100.1+dfsg-1ubuntu0.18.04.10.100.1+dfsg-1ubuntu0.18.04.20.100.1+dfsg-1ubuntu0.18.04.30.100.2+dfsg-1ubuntu0.18.04.10.100.3+dfsg-0ubuntu0.18.04.10.101.4+dfsg-0ubuntu0.18.04.10.102.1+dfsg-0ubuntu0.18.04.20.102.2+dfsg-0ubuntu0.18.04.10.102.3+dfsg-0ubuntu0.18.04.10.102.4+dfsg-0ubuntu0.18.04.10.103.2+dfsg-0ubuntu0.18.04.1 |
0.103.2+dfsg-0ubuntu0.18.04.2 |
clamavUbuntu:20.04:LTS |
before 0.103.2+dfsg-0ubuntu0.20.04.2, plus listed versions 0.101.4+dfsg-1ubuntu10.102.1+dfsg-1ubuntu10.102.1+dfsg-2ubuntu10.102.1+dfsg-2ubuntu20.102.2+dfsg-1ubuntu1 Show 4 moreShow less0.102.2+dfsg-2ubuntu10.102.3+dfsg-0ubuntu0.20.04.10.102.4+dfsg-0ubuntu0.20.04.10.103.2+dfsg-0ubuntu0.20.04.1 |
0.103.2+dfsg-0ubuntu0.20.04.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4918-3 is a vulnerability with no CVSS score yet in clamav, published May 3, 2021. No source lists public exploit code. Fixed in clamav 0.103.2+dfsg-0ubuntu0.14.04.1+esm2.