SquidClamav is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the daemon to crash, denying service to legitimate users. SquidClamav versions prior to 5.8 and 6.7 are vulnerable.

Vendor updates are available. Please see the references for more information.

• http://squidclamav.darold.net/news.html
• http://www.osvdb.org/84138
• http://www.securityfocus.com/bid/54663

---

Updated on 2015-03-25