Walt Mankowski via plug on 21 Feb 2023 08:49:54 -0800


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] ClamAV vuln

HFS+ hasn’t been the default file system on macOS since 10.13 (“High Sierra”) was released in 2017. I think the update actually converted your file system from HFS+ to APFS. So this bug is only going to affect people with very old Apple hardware that they haven’t updated in 6 years.

It’s not great, of course. But it’s also hard to imagine the bad guys are going to spend a lot of time targeting this particular flaw.

Walt

On Tue, Feb 21, 2023, at 10:21 AM, jeffv via plug wrote:
Antivirus apps are there to protect you – Cisco's ClamAV has a heckuva
flaw

https://www.theregister.com/2023/02/17/cisco_clamav_critical_flaw/

"A vulnerability in the HFS+ partition file parser of ClamAV versions
1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could
allow an unauthenticated, remote attacker to execute arbitrary code,"
states Cisco's security advisory, which identifies the issue as
CVE-2023-20032.

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug


___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug