CVE catalog

CVE-2017-12379

clamav: CVE-2017-12379

[CVE catalog]

Severity
High · CVSS 7.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
12.55% · Oct 25, 2026

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms in the message parsing function on an affected system. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. This action could cause a messageAddArgument (in message.c) buffer overflow condition when ClamAV scans the malicious email, allowing the attacker to potentially cause a DoS condition or execute arbitrary code on an affected device.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianclamavsid1.4.6+dfsg-1fixed
Debianclamavforky1.4.6+dfsg-1fixed
Debianclamavtrixie1.4.3+dfsg-1fixed
Debianclamavbookworm1.4.3+dfsg-1~deb12u2fixed
Debianclamavbookworm-security1.4.6+dfsg-0+deb12u1fixed
Alpineclamav3.100.99.3-r0fixed
Alpineclamav3.110.99.3-r0fixed
Alpineclamav3.120.99.3-r0fixed
Alpineclamav3.130.99.3-r0fixed
Alpineclamav3.80.99.3-r0fixed
Alpineclamav3.90.99.3-r0fixed
Ubuntuclamav14.040.97.8+dfsg-1ubuntu4vulnerable
Ubuntuclamav14.040.97.8+dfsg-1ubuntu5vulnerable
Ubuntuclamav14.040.98.1+dfsg-1ubuntu4vulnerable
Ubuntuclamav14.040.98.1+dfsg-1ubuntu5vulnerable
Ubuntuclamav14.040.98.1+dfsg-2ubuntu2vulnerable
Ubuntuclamav14.040.98.1+dfsg-4ubuntu1vulnerable
Ubuntuclamav14.040.98.1+dfsg-4ubuntu1.1vulnerable
Ubuntuclamav14.040.98.5+addedllvm-0ubuntu0.14.04.1vulnerable
Ubuntuclamav14.040.98.6+dfsg-0ubuntu0.14.04.1vulnerable
Ubuntuclamav14.040.98.7+dfsg-0ubuntu0.14.04.1vulnerable
Ubuntuclamav14.040.99.2+addedllvm-0ubuntu0.14.04.1vulnerable
Ubuntuclamav14.040.99.2+addedllvm-0ubuntu0.14.04.2vulnerable
Ubuntuclamav14.040.99.3+addedllvm-0ubuntu0.14.04.1fixed
Ubuntuclamav16.040.98.7+dfsg-0ubuntu4vulnerable
Ubuntuclamav16.040.98.7+dfsg-0ubuntu5vulnerable
Ubuntuclamav16.040.99+dfsg-1ubuntu1vulnerable
Ubuntuclamav16.040.99+dfsg-1ubuntu1.1vulnerable
Ubuntuclamav16.040.99+dfsg-1ubuntu1.2vulnerable
Ubuntuclamav16.040.99.2+dfsg-0ubuntu0.16.04.1vulnerable
Ubuntuclamav16.040.99.2+dfsg-0ubuntu0.16.04.2vulnerable
Ubuntuclamav16.040.99.2+dfsg-0ubuntu0.16.04.3vulnerable
Ubuntuclamav16.040.99.3+addedllvm-0ubuntu0.16.04.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianclamavsourcesid0.99.3~beta2+dfsg-1not yet assignedNot reported[888484]
Debianclamavsourceforky0.99.3~beta2+dfsg-1not yet assignedNot reported[888484]
Debianclamavsourcetrixie0.99.3~beta2+dfsg-1not yet assignedNot reported[888484]
Debianclamavsourcebookworm0.99.3~beta2+dfsg-1not yet assignedNot reported[888484]
Alpineclamavapk3.100.99.3-r0Not reportedALPINE-CVE-2017-12379Not reported
Alpineclamavapk3.110.99.3-r0Not reportedALPINE-CVE-2017-12379Not reported
Alpineclamavapk3.120.99.3-r0Not reportedALPINE-CVE-2017-12379Not reported
Alpineclamavapk3.130.99.3-r0Not reportedALPINE-CVE-2017-12379Not reported
Alpineclamavapk3.80.99.3-r0Not reportedALPINE-CVE-2017-12379Not reported
Alpineclamavapk3.90.99.3-r0Not reportedALPINE-CVE-2017-12379Not reported
Ubuntuclamavdeb14.040.99.3+addedllvm-0ubuntu0.14.04.1Not reportedUBUNTU-CVE-2017-12379Not reported
Ubuntuclamavdeb16.040.99.3+addedllvm-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2017-12379Not reported

[Debian bug #888484]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [clamav]Fixed
    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-base]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-daemon]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-doc]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-docs]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-freshclam]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-milter]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-testfiles]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamdscan]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [libclamav12]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [libclamav-dev]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

[Debian 13 (Trixie)]

  • [clamav]Fixed
    Details (2)

    • 1.4.3+dfsg-1 · amd64 · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · arm64 · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-base]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-daemon]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · amd64 · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · arm64 · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-doc]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-docs]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-freshclam]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · amd64 · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · arm64 · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-milter]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · amd64 · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · arm64 · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-testfiles]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

  • [clamdscan]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · amd64 · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · arm64 · trixie

      Fixed · Fixed: 0.99.3~beta2+dfsg-1

      dsa · clamav · debian · 13

Next results

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]