CVE-2015-2170

The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted file...

DEBIAN-CVE-2015-2170

The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2015-2170

The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted file...

Code injection

ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted xz archive file...

Design/Logic Flaw

ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted y0da cryptor file...

Design/Logic Flaw

ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted petite packed file...

Design/Logic Flaw

The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2015-2221

ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted y0da cryptor file...

CVE-2015-2222

ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted petite packed file...

CVE-2015-2170

The CVE-2015-2170 entry concerns ClamAV upx decoding: the upx decoder (upx.c) in ClamAV before 0.98.7 can crash the scanner (DoS) when processing crafted UPX-packed files. Connected advisories confirm a fixed version in ClamAV 0.98.7 and downstream updates. Affected products include ClamAV 0.98.7...

CVE-2015-2170

The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2015-2668

ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted xz archive file...

CVE-2015-2222

CVE-2015-2222 affects ClamAV prior to 0.98.7. A crafted petite packed file can cause a denial-of-service crash in the scanner. The issue is reported across multiple advisories (e.g., ALAS-2015-537, Gentoo GLSA, Debian/Ubuntu notes) with upgrade to 0.98.7 (or later) as the remediation. The connect...

CVE-2015-2221

CVE-2015-2221 affects ClamAV prior to 0.98.7. The vulnerability allows remote attackers to trigger a denial-of-service (infinite loop) by feeding a crafted y0da cryptor file, causing ClamAV to loop during processing. The issue is fixed in ClamAV 0.98.7 (and related advisories cite upgrading to th...

CVE-2015-2222

ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted petite packed file...

CVE-2015-2221

ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted y0da cryptor file...

CVE-2015-2170

The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2015-2668

ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted xz archive file...

CVE-2015-2668

CVE-2015-2668 affects ClamAV prior to 0.98.7, where processing of crafted xz archive files can cause a denial of service via an infinite loop. The issue is documented across multiple sources (e.g., the CVE entry and vendor advisories) and is listed alongside other CLAMAV flaws fixed in 0.98.7. Th...

ClamAV < 0.98.7 Multiple Vulnerabilities

According to its version, the ClamAV clamd antivirus daemon on the remote host is prior to 0.98.7. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the pefromupx function in upx.c. A remote attacker can exploit this flaw, via a specially crafted file, to...