{"id":"ALPINE-CVE-2017-12379","details":"ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms in the message parsing function on an affected system. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. This action could cause a messageAddArgument (in message.c) buffer overflow condition when ClamAV scans the malicious email, allowing the attacker to potentially cause a DoS condition or execute arbitrary code on an affected device.","modified":"2025-11-19T06:07:57.794596Z","published":"2018-01-26T20:29:00.613Z","upstream":["CVE-2017-12379"],"references":[{"type":"ADVISORY","url":"https://security.alpinelinux.org/vuln/CVE-2017-12379"}],"affected":[{"package":{"name":"clamav","ecosystem":"Alpine:v3.10","purl":"pkg:apk/alpine/clamav?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}],"versions":["0.94.2-r0","0.94.2-r1","0.94.2-r2","0.95.1-r0","0.95.1-r1","0.95.2-r0","0.95.2-r1","0.95.3-r0","0.95.3-r1","0.96-r0","0.96.1-r0","0.96.2-r0","0.96.3-r0","0.96.4-r0","0.96.5-r0","0.97-r0","0.97-r1","0.97-r2","0.97-r3","0.97-r4","0.97.1-r0","0.97.2-r0","0.97.3-r0","0.97.3-r1","0.97.3-r2","0.97.3-r3","0.97.4-r0","0.97.4-r1","0.97.4-r2","0.97.5-r0","0.97.6-r0","0.97.6-r1","0.97.7-r0","0.97.8-r0","0.97.8-r1","0.97.8-r2","0.98-r0","0.98-r1","0.98.1-r0","0.98.1-r1","0.98.1-r2","0.98.3-r0","0.98.4-r0","0.98.4-r1","0.98.5-r0","0.98.6-r0","0.98.6-r1","0.98.6-r2","0.98.7-r0","0.98.7-r1","0.98.7-r2","0.99-r0","0.99-r1","0.99-r2","0.99-r3","0.99.1-r0","0.99.1-r1","0.99.1-r2","0.99.2-r0","0.99.2-r1","0.99.2-r2","0.99.2-r3","0.99.2-r4","0.99.2-r5","0.99.2-r6"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-12379.json"}},{"package":{"name":"clamav","ecosystem":"Alpine:v3.11","purl":"pkg:apk/alpine/clamav?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}],"versions":["0.94.2-r0","0.94.2-r1","0.94.2-r2","0.95.1-r0","0.95.1-r1","0.95.2-r0","0.95.2-r1","0.95.3-r0","0.95.3-r1","0.96-r0","0.96.1-r0","0.96.2-r0","0.96.3-r0","0.96.4-r0","0.96.5-r0","0.97-r0","0.97-r1","0.97-r2","0.97-r3","0.97-r4","0.97.1-r0","0.97.2-r0","0.97.3-r0","0.97.3-r1","0.97.3-r2","0.97.3-r3","0.97.4-r0","0.97.4-r1","0.97.4-r2","0.97.5-r0","0.97.6-r0","0.97.6-r1","0.97.7-r0","0.97.8-r0","0.97.8-r1","0.97.8-r2","0.98-r0","0.98-r1","0.98.1-r0","0.98.1-r1","0.98.1-r2","0.98.3-r0","0.98.4-r0","0.98.4-r1","0.98.5-r0","0.98.6-r0","0.98.6-r1","0.98.6-r2","0.98.7-r0","0.98.7-r1","0.98.7-r2","0.99-r0","0.99-r1","0.99-r2","0.99-r3","0.99.1-r0","0.99.1-r1","0.99.1-r2","0.99.2-r0","0.99.2-r1","0.99.2-r2","0.99.2-r3","0.99.2-r4","0.99.2-r5","0.99.2-r6"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-12379.json"}},{"package":{"name":"clamav","ecosystem":"Alpine:v3.12","purl":"pkg:apk/alpine/clamav?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}],"versions":["0.94.2-r0","0.94.2-r1","0.94.2-r2","0.95.1-r0","0.95.1-r1","0.95.2-r0","0.95.2-r1","0.95.3-r0","0.95.3-r1","0.96-r0","0.96.1-r0","0.96.2-r0","0.96.3-r0","0.96.4-r0","0.96.5-r0","0.97-r0","0.97-r1","0.97-r2","0.97-r3","0.97-r4","0.97.1-r0","0.97.2-r0","0.97.3-r0","0.97.3-r1","0.97.3-r2","0.97.3-r3","0.97.4-r0","0.97.4-r1","0.97.4-r2","0.97.5-r0","0.97.6-r0","0.97.6-r1","0.97.7-r0","0.97.8-r0","0.97.8-r1","0.97.8-r2","0.98-r0","0.98-r1","0.98.1-r0","0.98.1-r1","0.98.1-r2","0.98.3-r0","0.98.4-r0","0.98.4-r1","0.98.5-r0","0.98.6-r0","0.98.6-r1","0.98.6-r2","0.98.7-r0","0.98.7-r1","0.98.7-r2","0.99-r0","0.99-r1","0.99-r2","0.99-r3","0.99.1-r0","0.99.1-r1","0.99.1-r2","0.99.2-r0","0.99.2-r1","0.99.2-r2","0.99.2-r3","0.99.2-r4","0.99.2-r5","0.99.2-r6"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-12379.json"}},{"package":{"name":"clamav","ecosystem":"Alpine:v3.13","purl":"pkg:apk/alpine/clamav?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}],"versions":["0.94.2-r0","0.94.2-r1","0.94.2-r2","0.95.1-r0","0.95.1-r1","0.95.2-r0","0.95.2-r1","0.95.3-r0","0.95.3-r1","0.96-r0","0.96.1-r0","0.96.2-r0","0.96.3-r0","0.96.4-r0","0.96.5-r0","0.97-r0","0.97-r1","0.97-r2","0.97-r3","0.97-r4","0.97.1-r0","0.97.2-r0","0.97.3-r0","0.97.3-r1","0.97.3-r2","0.97.3-r3","0.97.4-r0","0.97.4-r1","0.97.4-r2","0.97.5-r0","0.97.6-r0","0.97.6-r1","0.97.7-r0","0.97.8-r0","0.97.8-r1","0.97.8-r2","0.98-r0","0.98-r1","0.98.1-r0","0.98.1-r1","0.98.1-r2","0.98.3-r0","0.98.4-r0","0.98.4-r1","0.98.5-r0","0.98.6-r0","0.98.6-r1","0.98.6-r2","0.98.7-r0","0.98.7-r1","0.98.7-r2","0.99-r0","0.99-r1","0.99-r2","0.99-r3","0.99.1-r0","0.99.1-r1","0.99.1-r2","0.99.2-r0","0.99.2-r1","0.99.2-r2","0.99.2-r3","0.99.2-r4","0.99.2-r5","0.99.2-r6"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-12379.json"}},{"package":{"name":"clamav","ecosystem":"Alpine:v3.8","purl":"pkg:apk/alpine/clamav?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}],"versions":["0.94.2-r0","0.94.2-r1","0.94.2-r2","0.95.1-r0","0.95.1-r1","0.95.2-r0","0.95.2-r1","0.95.3-r0","0.95.3-r1","0.96-r0","0.96.1-r0","0.96.2-r0","0.96.3-r0","0.96.4-r0","0.96.5-r0","0.97-r0","0.97-r1","0.97-r2","0.97-r3","0.97-r4","0.97.1-r0","0.97.2-r0","0.97.3-r0","0.97.3-r1","0.97.3-r2","0.97.3-r3","0.97.4-r0","0.97.4-r1","0.97.4-r2","0.97.5-r0","0.97.6-r0","0.97.6-r1","0.97.7-r0","0.97.8-r0","0.97.8-r1","0.97.8-r2","0.98-r0","0.98-r1","0.98.1-r0","0.98.1-r1","0.98.1-r2","0.98.3-r0","0.98.4-r0","0.98.4-r1","0.98.5-r0","0.98.6-r0","0.98.6-r1","0.98.6-r2","0.98.7-r0","0.98.7-r1","0.98.7-r2","0.99-r0","0.99-r1","0.99-r2","0.99-r3","0.99.1-r0","0.99.1-r1","0.99.1-r2","0.99.2-r0","0.99.2-r1","0.99.2-r2","0.99.2-r3","0.99.2-r4","0.99.2-r5","0.99.2-r6"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-12379.json"}},{"package":{"name":"clamav","ecosystem":"Alpine:v3.9","purl":"pkg:apk/alpine/clamav?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.3-r0"}]}],"versions":["0.94.2-r0","0.94.2-r1","0.94.2-r2","0.95.1-r0","0.95.1-r1","0.95.2-r0","0.95.2-r1","0.95.3-r0","0.95.3-r1","0.96-r0","0.96.1-r0","0.96.2-r0","0.96.3-r0","0.96.4-r0","0.96.5-r0","0.97-r0","0.97-r1","0.97-r2","0.97-r3","0.97-r4","0.97.1-r0","0.97.2-r0","0.97.3-r0","0.97.3-r1","0.97.3-r2","0.97.3-r3","0.97.4-r0","0.97.4-r1","0.97.4-r2","0.97.5-r0","0.97.6-r0","0.97.6-r1","0.97.7-r0","0.97.8-r0","0.97.8-r1","0.97.8-r2","0.98-r0","0.98-r1","0.98.1-r0","0.98.1-r1","0.98.1-r2","0.98.3-r0","0.98.4-r0","0.98.4-r1","0.98.5-r0","0.98.6-r0","0.98.6-r1","0.98.6-r2","0.98.7-r0","0.98.7-r1","0.98.7-r2","0.99-r0","0.99-r1","0.99-r2","0.99-r3","0.99.1-r0","0.99.1-r1","0.99.1-r2","0.99.2-r0","0.99.2-r1","0.99.2-r2","0.99.2-r3","0.99.2-r4","0.99.2-r5","0.99.2-r6"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-12379.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}