Medium: clamav

Issue Overview: ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted y0da cryptor file. CVE-2015-2221 ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted xz archive file. CVE-2015-2668 ClamAV before...

[SECURITY] [DLA 233-1] clamav security and upstream version update

Package : clamav Version : 0.98.7+dfsg-0+deb6u1 CVE ID : CVE-2014-9328 CVE-2015-1461 CVE-2015-1462 CVE-2015-1463 CVE-2015-2170 CVE-2015-2221 CVE-2015-2222 CVE-2015-2668 Upstream published version 0.98.7. This update updates sqeeze-lts to the latest upstream release in line with the approach used...

Debian DLA-233-1 : clamav security and upstream version update

Upstream published version 0.98.7. This update updates sqeeze-lts to the latest upstream release in line with the approach used for other Debian releases. The changes are not strictly required for operation, but users of the previous version in Squeeze may not be able to make use of all current...

DLA-233-1 clamav - security update

Bulletin has no description...

SUSE SLED11 / SLES11 Security Update : clamav (SUSE-SU-2014:0414-1)

The antivirus scanner ClamAV has been updated to version 0.98.1, which includes the following fixes : - Code quality fixes in libclamav, clamd, sigtool, clamav-milter, clamconf, and clamdtop. - Code quality fixes in libclamav, libclamunrar and freshclam. - bb 8385: a PDF ASCII85Decode zero-length...

openSUSE Security Update : clamav (openSUSE-2015-366)

The ClamAV antivirus engine was updated to version 0.98.7 to fix several security and non-security issues. The following vulnerabilities were fixed bsc929192 : - CVE-2015-2170: Fix crash in upx decoder with crafted file. Discovered and patch supplied by Sebastian Andrzej Siewior. - CVE-2015-2221:...

SUSE SLED10 / SLED11 / SLES10 / SLES11 Security Update : ClamAV (SUSE-SU-2013:0617-1)

ClamAV has been updated to the 0.97.7 release that contains various security related hardening fixes. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

FreeBSD : clamav -- multiple vulnerabilities (3d0428b2-fdfb-11e4-894f-d050996490d0)

ClamAV project reports : ClamAV 0.98.7 is here! This release contains new scanning features and bug fixes. Fix infinite loop condition on crafted y0da cryptor file. Identified and patch suggested by Sebastian Andrzej Siewior. CVE-2015-2221. Fix crash on crafted petite packed file. Reported and...

ClamAV Denial of Service Vulnerability (CNVD-2015-03163)

ClamAV is an open source antivirus. A denial of service vulnerability exists in versions of ClamAV prior to 0.98.7 that allows remote attackers to cause a denial of service via a crafted xy archive file...

SuSE 11.3 Security Update : clamav (SAT Patch Number 10664)

The ClamAV antivirus engine was updated to version 0.98.7 to fix several security issues : - Fix crash in upx decoder with crafted file. Discovered and patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170 - Fix infinite loop condition on crafted y0da cryptor file. Identified and patch...

Fedora 20 : clamav-0.98.7-1.fc20 (2015-7378)

ClamAV 0.98.7 ============= This release contains new scanning features and bug fixes. - Improvements to PDF processing: decryption, escape sequence handling, and file property collection. - Scanning/analysis of additional Microsoft Office 2003 XML format. - Fix infinite loop condition on crafted...

CVE-2015-2668

ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted xz archive file...

DEBIAN-CVE-2015-2668

ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted xz archive file...

CVE-2015-2668

ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted xz archive file...

CVE-2015-2222

ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted petite packed file...

DEBIAN-CVE-2015-2222

ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted petite packed file...

CVE-2015-2222

ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted petite packed file...

CVE-2015-2221

ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted y0da cryptor file...

CVE-2015-2221

ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted y0da cryptor file...

DEBIAN-CVE-2015-2221

ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted y0da cryptor file...