Vulnerability Name:

CVE-2008-3215 (CCN-44200)

Assigned:2008-06-09
Published:2008-06-09
Updated:2017-08-08
Summary:libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access.
Note: this issue exists because of an incomplete fix for CVE-2008-2713.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-399
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2008-3215

Source: APPLE
Type: UNKNOWN
APPLE-SA-2008-09-15

Source: SUSE
Type: UNKNOWN
SUSE-SR:2008:015

Source: CCN
Type: Clamav-announce Mailing list, 2008-07-07 11:56 -400
announcing ClamAV 0.93.2

Source: CONFIRM
Type: UNKNOWN
http://lurker.clamav.net/message/20080707.155612.ad411b00.en.html

Source: SECUNIA
Type: UNKNOWN
31091

Source: SECUNIA
Type: UNKNOWN
31437

Source: CCN
Type: SA31882
Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
31882

Source: GENTOO
Type: UNKNOWN
GLSA-200808-07

Source: CCN
Type: Apple Web site
About the security content of Mac OS X v10.5.5 and Security Update 2008-006

Source: CONFIRM
Type: Exploit
http://svn.clamav.net/websvn/diff.php?repname=clamav-devel&path=/branches/0.93/libclamav/petite.c&rev=3920

Source: CCN
Type: ClamAV Web site
Clam AntiVirus

Source: DEBIAN
Type: DSA-1616
clamav -- denial of service

Source: CCN
Type: GLSA-200808-07
ClamAV: Multiple Denials of Service

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2008:166

Source: MLIST
Type: UNKNOWN
[oss-security] 20080708 Re: CVE id request: Clamav

Source: MLIST
Type: UNKNOWN
[oss-security] 20080715 Re: CVE id request: Clamav

Source: CERT
Type: US Government Resource
TA08-260A

Source: VUPEN
Type: UNKNOWN
ADV-2008-2584

Source: XF
Type: UNKNOWN
clamav-petitec-dos(44200)

Source: XF
Type: UNKNOWN
clamav-petitec-dos(44200)

Source: FEDORA
Type: UNKNOWN
FEDORA-2008-6338

Source: FEDORA
Type: UNKNOWN
FEDORA-2008-6422

Source: CONFIRM
Type: UNKNOWN
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1000#c4

Vulnerable Configuration:Configuration 1:
  • cpe:/a:clam_anti-virus:clamav:0.88.2:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.88.4:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.88.5:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.88.6:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.88.7:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.88.7:p0:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.88.7:p1:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.90.1:p0:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.90.2:p0:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.90.3:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.90.3:p0:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.90.3:p1:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.91.2:p0:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.92:p0:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.92.1:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.93:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:clamav:clamav:0.92.1:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.90:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.90.1:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.88.4:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.88.5:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.88.6:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.88.7:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.88.2:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.90.3:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.92_p0:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.93:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.88.7_p0:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.88.7_p1:*:*:*:*:*:*:*
  • OR cpe:/a:clamav:clamav:0.90.2:*:*:*:*:*:*:*
  • AND
  • cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0::x86_64:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0::x86_64:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2008.0::x86-64:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2008.1:x86_64:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2007.1::x86-64:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2008.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:8026
    P
    		DSA-1616 clamav -- denial of service
    2014-06-23
    oval:org.mitre.oval:def:20342
    P
    		DSA-1616-2 clamav - denial of service
    2014-06-23
    oval:org.debian:def:1616
    V
    		denial of service
    2008-07-26
    BACK
    clam_anti-virus clamav 0.88.2
    clam_anti-virus clamav 0.88.4
    clam_anti-virus clamav 0.88.5
    clam_anti-virus clamav 0.88.6
    clam_anti-virus clamav 0.88.7
    clam_anti-virus clamav 0.88.7 p0
    clam_anti-virus clamav 0.88.7 p1
    clam_anti-virus clamav 0.90
    clam_anti-virus clamav 0.90.1
    clam_anti-virus clamav 0.90.1 p0
    clam_anti-virus clamav 0.90.2
    clam_anti-virus clamav 0.90.2 p0
    clam_anti-virus clamav 0.90.3
    clam_anti-virus clamav 0.90.3 p0
    clam_anti-virus clamav 0.90.3 p1
    clam_anti-virus clamav 0.91.2 p0
    clam_anti-virus clamav 0.92 p0
    clam_anti-virus clamav 0.92.1
    clam_anti-virus clamav 0.93
    clamav clamav 0.92.1
    clamav clamav 0.90
    clamav clamav 0.90.1
    clamav clamav 0.88.4
    clamav clamav 0.88.5
    clamav clamav 0.88.6
    clamav clamav 0.88.7
    clamav clamav 0.88.2
    clamav clamav 0.90.3
    clamav clamav 0.91.2_p0
    clamav clamav 0.92_p0
    clamav clamav 0.93
    clamav clamav 0.90.3_p1
    clamav clamav 0.90.3_p0
    clamav clamav 0.90.2_p0
    clamav clamav 0.90.1_p0
    clamav clamav 0.88.7_p0
    clamav clamav 0.88.7_p1
    clamav clamav 0.90.2
    gentoo linux *
    mandrakesoft mandrake linux corporate server 3.0
    mandrakesoft mandrake linux corporate server 4.0
    mandrakesoft mandrake linux corporate server 4.0
    mandrakesoft mandrake linux corporate server 3.0
    mandrakesoft mandrake linux 2007.1
    mandrakesoft mandrake linux 2008.0
    debian debian linux 4.0
    mandrakesoft mandrake linux 2008.0
    mandrakesoft mandrake linux 2008.1 x86_64
    mandrakesoft mandrake linux 2007.1
    apple mac os x server 10.5
    apple mac os x server 10.4.11
    apple mac os x server 10.5.1
    apple mac os x server 10.5.2
    mandrakesoft mandrake linux 2008.1
    apple mac os x server 10.5.3
    apple mac os x server 10.5.4