Vulnerability Details : CVE-2018-0202
clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.
Vulnerability category: Denial of service
Products affected by CVE-2018-0202
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
- cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-0202
2.87%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 86 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-0202
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
8.6
|
2.9
|
NIST | |
|
5.5
|
MEDIUM | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2018-0202
-
The product reads data past the end, or before the beginning, of the intended buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-0202
-
https://usn.ubuntu.com/3592-1/
USN-3592-1: ClamAV vulnerabilities | Ubuntu security noticesThird Party Advisory
-
https://bugzilla.clamav.net/show_bug.cgi?id=11980
Bug 11980 – Heap overflow in pdf_parse_stringIssue Tracking;Third Party Advisory
-
https://bugzilla.clamav.net/show_bug.cgi?id=11973
Bug 11973 – Heap overflow pdf_parse_array pdfng.c:566Issue Tracking;Patch;Third Party Advisory
-
https://lists.debian.org/debian-lts-announce/2018/03/msg00011.html
[SECURITY] [DLA 1307-1] clamav security updateMailing List;Third Party Advisory
-
https://security.gentoo.org/glsa/201804-16
ClamAV: Multiple vulnerabilities (GLSA 201804-16) — Gentoo securityThird Party Advisory
-
https://usn.ubuntu.com/3592-2/
USN-3592-2: ClamAV vulnerabilities | Ubuntu security noticesThird Party Advisory
Jump to