CVE-2019-1789 ClamAV Denial of Service Vulnerability
An out-of-bounds heap read in ClamAV when scanning packed PE files allows attackers to cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-1789?
CVE-2019-1789 is a high-severity denial of service vulnerability in Clamav Clamav, published on 5 Nov 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ClamAV versions prior to 0.101.2 are susceptible to a denial of service (DoS) vulnerability. An out-of-bounds heap read condition may occur when scanning PE files. An example is Windows EXE and DLL files that have been packed using Aspack as a result of inadequate bound-checking.
Which versions are affected by CVE-2019-1789?
It affects 1 product.
Products include Clamav Clamav.
How do I fix CVE-2019-1789?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-1789 being exploited?
There is no known exploitation of CVE-2019-1789 in the wild and no public exploit code.
Other vulnerabilities in Clamav Clamav
Sources
Also known as ALPINE-CVE-2019-1789, CLEANSTART-2026-AK38137, DEBIAN-CVE-2019-1789, GHSA-ccg9-2v2c-6xww, UBUNTU-CVE-2019-1789.