Lucene search
HistoryMay 12, 2015 - 7:59 p.m.
CVE-2015-2170
cve-2015-2170
clamav
upx decoder
denial of service
remote attackers
crafted file
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.1 Medium
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.8%
The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
Affected configurations
Node
canonicalubuntu_linuxMatch12.04lts
ORcanonicalubuntu_linuxMatch14.04lts
ORcanonicalubuntu_linuxMatch14.10
ORcanonicalubuntu_linuxMatch15.04
Node
clamavclamavRange≤0.98.6
Related
checkpoint_advisories
checkpoint_advisories
ClamAV UPX File Handling Integer Overflow (CVE-2015-2170)
2015-07-28 00:00:00
cvelist
cvelist
CVE-2015-2170
2015-05-12 19:00:00
debiancve
debiancve
CVE-2015-2170
2015-05-12 19:59:09
nvd
nvd
CVE-2015-2170
2015-05-12 19:59:09
prion
prion
Design/Logic Flaw
2015-05-12 19:59:00
ubuntucve
ubuntucve
CVE-2015-2170
2015-05-01 00:00:00
nessus
nessus
Amazon Linux AMI : clamav (ALAS-2015-537)
2015-06-04 00:00:00
FreeBSD : clamav -- multiple vulnerabilities (3d0428b2-fdfb-11e4-894f-d050996490d0)
2015-05-20 00:00:00
SuSE 11.3 Security Update : clamav (SAT Patch Number 10664)
2015-05-14 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2015-537)
2015-09-08 00:00:00
ClamAV < 0.98.7 Multiple DoS Vulnerabilities - Windows
2015-08-17 00:00:00
ClamAV < 0.98.7 Multiple DoS Vulnerabilities - Linux
2015-08-17 00:00:00
amazon
amazon
Medium: clamav
2015-06-02 22:23:00
freebsd
freebsd
clamav -- multiple vulnerabilities
2015-04-29 00:00:00
archlinux
archlinux
clamav: multiple issues
2015-05-03 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: clamav-0.98.7-1.fc22
2015-05-03 17:21:27
[SECURITY] Fedora 20 Update: clamav-0.98.7-1.fc20
2015-05-12 20:46:17
[SECURITY] Fedora 21 Update: clamav-0.98.7-1.fc21
2015-05-02 18:12:06
securityvulns
securityvulns
[ MDVSA-2015:221 ] clamav
2015-05-04 00:00:00
ClamAV multiple security vulnerabilities
2015-05-04 00:00:00
ubuntu
ubuntu
ClamAV vulnerabilities
2015-05-05 00:00:00
mageia
mageia
Updated clamav packages fix security vulnerabilities
2015-05-05 16:36:50
gentoo
gentoo
ClamAV: Multiple vulnerabilities
2015-12-30 00:00:00
debian
debian
[SECURITY] [DLA 233-1] clamav security and upstream version update
2015-05-29 03:57:22
osv
osv
clamav - security update
2015-05-28 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.1 Medium
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.8%
Related for CVE-2015-2170