SUSE-SU-2015:0882-2

    Dashboard / Vulnerabilities / SUSE-SU-2015:0882-2

    SUSE-SU-2015:0882-2

    Published: 11 May 2015Last Modified: 4 Feb 2026

    Summary: Security update for clamav

    Details: The ClamAV antivirus engine was updated to version 0.98.7 to fix several security and non security issues. The following vulnerabilities were fixed (bsc#929192): * CVE-2015-2170: Fix crash in upx decoder with crafted file. Discovered and patch supplied by Sebastian Andrzej Siewior. * CVE-2015-2221: Fix infinite loop condition on crafted y0da cryptor file. Identified and patch suggested by Sebastian Andrzej Siewior. * CVE-2015-2222: Fix crash on crafted petite packed file. Reported and patch supplied by Sebastian Andrzej Siewior. * CVE-2015-2668: Fix an infinite loop condition on a crafted 'xz' archive file. This was reported by Dimitri Kirchner and Goulven Guiheux. * CVE-2015-2305: Apply upstream patch for possible heap overflow in Henry Spencer's regex library.

    References: https://www.suse.com/support/update/announcement/2015/suse-su-20150882-2/, https://bugzilla.suse.com/929192, https://www.suse.com/security/cve/CVE-2015-2170, https://www.suse.com/security/cve/CVE-2015-2221, https://www.suse.com/security/cve/CVE-2015-2222, https://www.suse.com/security/cve/CVE-2015-2305, https://www.suse.com/security/cve/CVE-2015-2668

    Affected packages

    Package

    Name: clamav

    Purl: pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Desktop%2012

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -0.98.7-13.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2015:0882-2 | CVE-DB