View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2017-6419 severity moderate: SUSE including 81 source package names (clamav, clamav-0.100.0-1.17, …), 173 product×package rows across 58 product lines (SUSE CaaS Platform 4.0, SUSE Enterprise Storage 6, … (58 product lines)): Fixed 105, Known Not Affected 68.
mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted CHM file.