Debian/clamav: unknown

ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

Action: Upgrade clamav to 0.92.1~dfsg2-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-1387#Debian:14/clamav
• https://security-tracker.debian.org/tracker/CVE-2008-1387

published 2008-04-16T16:05:00Z · modified 2026-10-23T17:47:45.581131438Z · JSON