here is the culprit -- one of my servers has high traffic, and this issue was 
prevalent for the past over an year. i have simscan disabled on this server for 
the past over 1 year.


----- Original Message -----
From: Joel Esler (jesler) []
Sent: Fri, 26 Jan 2018 20:14:45 +0000

Update on the recent "File Descriptors" issue in ClamAV
A signature introduced in daily.cvd version 24256 triggered bug that exists in 
all current stable releases of ClamAV.

The symptoms on a Linux/Unix machine running clamd under heavy load results in 
the system running out of file descriptors, because the file descriptors for 
deleted temp files were not being closed.  On Windows systems, a different 
error occurred wherein the system reported “permission denied” errors when 
closing (unlinking) the temp files.

The bug was reported as early as April 2016 here: A patch for this bug was 
applied towards the upcoming 0.100.0 feature release of ClamAV, but 
unfortunately the fix didn’t make it into the recent 0.99.3 security patch 

For the time-being, the offending signature was pulled as of daily.cvd version 
24258, and changes to our backend processes have been implemented to prevent 
this from happening again.

We apologize for the inconvenience this has caused. Future releases of ClamAV 
will have a fix in place to prevent this issue from reocurring.

Joel Esler | Talos: Manager |<>

clamav-users mailing list

Help us build a comprehensive ClamAV guide:

To unsubscribe, e-mail:
For additional commands, e-mail:

Reply via email to