[clamav-users] [ext] Segfaults with database version 26908

[Matthias Rieber]

Hello,

On Tue, 16 May 2023, Ralf Hildebrandt via clamav-users wrote:

>> As far as I can tell this happens in
>> 
>> 0x7fdfd44c377d <ac_backward_match_branch+813>
>> 
>> We use version 0.103.8+dfsg-0+deb11u1 on debian bullseye.
>> 
>> Has anyone seen this, too?
>
> I've seen this with 1.1.0-1 as well. Maybe they're related to the
> "pattern issue" I posted a while ago

yes, it turns out that you can mitigate this issue when you whitelist 
this signature:

$ echo "Win.Downloader.LNKAgent-10001628-0" > /var/lib/clamav/bad_sig.ign2

Regards,
Matthias