4155 matches found
ClamAV < 0.98.7 Multiple Vulnerabilities
According to its version, the ClamAV clamd antivirus daemon on the remote host is prior to 0.98.7. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the pefromupx function in upx.c. A remote attacker can exploit this flaw, via a specially crafted file, to...
SUSE-SU-2015:0882-2 Security update for clamav
The ClamAV antivirus engine was updated to version 0.98.7 to fix several security and non security issues. The following vulnerabilities were fixed bsc929192: CVE-2015-2170: Fix crash in upx decoder with crafted file. Discovered and patch supplied by Sebastian Andrzej Siewior. CVE-2015-2221: Fix...
SUSE-SU-2015:0882-1 Security update for clamav
The ClamAV antivirus engine was updated to version 0.98.7 to fix several security and non security issues. The following vulnerabilities were fixed bsc929192: CVE-2015-2170: Fix crash in upx decoder with crafted file. Discovered and patch supplied by Sebastian Andrzej Siewior. CVE-2015-2221: Fix...
Ubuntu: Security Advisory (USN-2594-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : ClamAV vulnerabilities (USN-2594-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2594-1 advisory. It was discovered that ClamAV incorrectly handled certain malformed files. A remote attacker could use this issue to cause ClamAV to crash, resulting in ...
USN-2594-1: ClamAV vulnerabilities
It was discovered that ClamAV incorrectly handled certain malformed files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. In the default installation, attackers would be isolated by the ClamAV AppArmor profile...
USN-2594-1 clamav vulnerabilities
It was discovered that ClamAV incorrectly handled certain malformed files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. In the default installation, attackers would be isolated by the ClamAV AppArmor profile...
Updated clamav packages fix security vulnerabilities
This updates fixes the following security issues: Fix infinite loop condition on crafted y0da cryptor file. Identified and patch suggested by Sebastian Andrzej Siewior. CVE-2015-2221 Fix crash on crafted petite packed file. Reported and patch supplied by Sebastian Andrzej Siewior. CVE-2015-2222...
MGASA-2015-0190 Updated clamav packages fix security vulnerabilities
This updates fixes the following security issues: Fix infinite loop condition on crafted y0da cryptor file. Identified and patch suggested by Sebastian Andrzej Siewior. CVE-2015-2221 Fix crash on crafted petite packed file. Reported and patch supplied by Sebastian Andrzej Siewior. CVE-2015-2222...
Mandriva Linux Security Advisory : clamav (MDVSA-2015:221)
Multiple vulnerabilities has been found and corrected in clamav : Fix infinite loop condition on crafted y0da cryptor file. Identified and patch suggested by Sebastian Andrzej Siewior CVE-2015-2221. Fix crash on crafted petite packed file. Reported and patch supplied by Sebastian Andrzej Siewior...
[ MDVSA-2015:221 ] clamav
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:221 http://www.mandriva.com/en/support/security/ Package : clamav Date : May 4, 2015 Affected: Business Server 1.0, Business Server 2.0 Problem Description: Multiple vulnerabilities has been found and...
ClamAV pe.c cli_scanpe() file handling remote denial of service vulnerability
ClamAV is an anti-virus application. A security vulnerability in ClamAV pe.c cliscanpe handling of special files allows remote attackers to exploit this vulnerability to crash the application...
Fedora 22 : clamav-0.98.7-1.fc22 (2015-7346)
ClamAV 0.98.7 ============= This release contains new scanning features and bug fixes. - Improvements to PDF processing: decryption, escape sequence handling, and file property collection. - Scanning/analysis of additional Microsoft Office 2003 XML format. - Fix infinite loop condition on crafted...
Fedora 21 : clamav-0.98.7-1.fc21 (2015-7334)
ClamAV 0.98.7 ============= This release contains new scanning features and bug fixes. - Improvements to PDF processing: decryption, escape sequence handling, and file property collection. - Scanning/analysis of additional Microsoft Office 2003 XML format. - Fix infinite loop condition on crafted...
ClamAV upx.c pefromupx() UPX Decode Handling Remote Denial of Service Vulnerability
ClamAV is an anti-virus application. ClamAV upx.c pefromupx handles special files with a security vulnerability that allows remote attackers to exploit the vulnerability to crash the application...
ClamAV multiple security vulnerabilities
DoS conditions, buffer overflow, memory corruption...
ClamAV yc.c yc_poly_emulator() file handling remote denial of service vulnerability
ClamAV is an anti-virus application. ClamAV yc.c ycpolyemulator handles special files has a security vulnerability that allows remote attackers to exploit to crash the application...
clamav: multiple issues
CVE-2015-2170 denial of service A flaw has been found in the UPX decoder with crafted files. During unpacking there are two range checks which are implemented "manually". Those checks lack the detection of overflows which are considered by the CLIISCONTAINED macro. - CVE-2015-2221 denial of...
Fedora Update for clamav FEDORA-2015-7334
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...