CVE-2019-1787

Name	CVE-2019-1787
Description	A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of proper data handling mechanisms within the device buffer while indexing remaining file data on an affected device. An attacker could exploit this vulnerability by sending crafted PDF files to an affected device. A successful exploit could allow the attacker to cause a heap buffer out-of-bounds read condition, resulting in a crash that could result in a denial of service condition on an affected device.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-1759-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
clamav (PTS)	jessie, jessie (lts)	0.103.9+dfsg-0+deb8u1	fixed
	stretch (security)	0.103.6+dfsg-0+deb9u1	fixed
	stretch (lts), stretch	0.103.9+dfsg-0+deb9u1	fixed
	buster (security), buster, buster (lts)	0.103.9+dfsg-0+deb10u1	fixed
	bullseye	0.103.10+dfsg-0+deb11u1	fixed
	bookworm	1.0.7+dfsg-1~deb12u1	fixed
	sid, trixie	1.4.1+dfsg-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
clamav	source	wheezy	(unfixed)	end-of-life
clamav	source	jessie	0.100.3+dfsg-0+deb8u1		DLA-1759-1
clamav	source	stretch	0.100.3+dfsg-0+deb9u1
clamav	source	(unstable)	0.101.2+dfsg-1

https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html