SUSE-SU-2015:0882-1

Vulnerability from csaf_suse - Published: 2015-05-11 07:27 - Updated: 2026-09-20 12:03
Summary
Security update for clamav
Severity
Moderate
Notes
Title of the patch: Security update for clamav
Description of the patch: The ClamAV antivirus engine was updated to version 0.98.7 to fix several security and non security issues. The following vulnerabilities were fixed (bsc#929192): * CVE-2015-2170: Fix crash in upx decoder with crafted file. Discovered and patch supplied by Sebastian Andrzej Siewior. * CVE-2015-2221: Fix infinite loop condition on crafted y0da cryptor file. Identified and patch suggested by Sebastian Andrzej Siewior. * CVE-2015-2222: Fix crash on crafted petite packed file. Reported and patch supplied by Sebastian Andrzej Siewior. * CVE-2015-2668: Fix an infinite loop condition on a crafted 'xz' archive file. This was reported by Dimitri Kirchner and Goulven Guiheux. * CVE-2015-2305: Apply upstream patch for possible heap overflow in Henry Spencer's regex library.
Patchnames: SUSE-SLE-SERVER-12-2015-198
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2015-2170
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2015-2221
Affected products
Recommended 9 products, the same list as for CVE-2015-2170
Threats
Impact moderate
CVE-2015-2222
Affected products
Recommended 9 products, the same list as for CVE-2015-2170
Threats
Impact moderate
CVE-2015-2305
Affected products
Recommended 9 products, the same list as for CVE-2015-2170
Threats
Impact moderate
CVE-2015-2668
Affected products
Recommended 9 products, the same list as for CVE-2015-2170
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/929192 self
https://www.suse.com/security/cve/CVE-2015-2170/ self
https://www.suse.com/security/cve/CVE-2015-2221/ self
https://www.suse.com/security/cve/CVE-2015-2222/ self
https://www.suse.com/security/cve/CVE-2015-2305/ self
https://www.suse.com/security/cve/CVE-2015-2668/ self
https://www.suse.com/security/cve/CVE-2015-2170 external
https://bugzilla.suse.com/1040662 external
https://bugzilla.suse.com/921950 external
https://bugzilla.suse.com/922560 external
https://bugzilla.suse.com/929192 external
https://www.suse.com/security/cve/CVE-2015-2221 external
https://bugzilla.suse.com/1040662 external
https://bugzilla.suse.com/921950 external
https://bugzilla.suse.com/922560 external
https://bugzilla.suse.com/929192 external
https://www.suse.com/security/cve/CVE-2015-2222 external
https://bugzilla.suse.com/1040662 external
https://bugzilla.suse.com/921950 external
https://bugzilla.suse.com/922560 external
https://bugzilla.suse.com/929192 external
https://www.suse.com/security/cve/CVE-2015-2305 external
https://bugzilla.suse.com/1040662 external
https://bugzilla.suse.com/921950 external
https://bugzilla.suse.com/922022 external
https://bugzilla.suse.com/922028 external
https://bugzilla.suse.com/922030 external
https://bugzilla.suse.com/922043 external
https://bugzilla.suse.com/922560 external
https://bugzilla.suse.com/922567 external
https://bugzilla.suse.com/929192 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-2668 external
https://bugzilla.suse.com/1040662 external
https://bugzilla.suse.com/921950 external
https://bugzilla.suse.com/922560 external
https://bugzilla.suse.com/929192 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for clamav",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "The ClamAV antivirus engine was updated to version 0.98.7 to fix several security and non security issues.\n\nThe following vulnerabilities were fixed (bsc#929192):\n* CVE-2015-2170: Fix crash in upx decoder with crafted file. Discovered and patch supplied by Sebastian Andrzej Siewior.\n* CVE-2015-2221: Fix infinite loop condition on crafted y0da cryptor file. Identified and patch suggested by Sebastian Andrzej Siewior.\n* CVE-2015-2222: Fix crash on crafted petite packed file. Reported and patch supplied by Sebastian Andrzej Siewior.\n* CVE-2015-2668: Fix an infinite loop condition on a crafted \u0027xz\u0027 archive file. This was reported by Dimitri Kirchner and Goulven Guiheux.\n* CVE-2015-2305: Apply upstream patch for possible heap overflow in Henry Spencer\u0027s regex library.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-SERVER-12-2015-198",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0882-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2015:0882-1",
        "url": "https://www.suse.com/support/update/announcement/2015/suse-su-20150882-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2015:0882-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2015-May/001385.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 929192",
        "url": "https://bugzilla.suse.com/929192"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2170 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2170/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2221 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2221/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2222 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2222/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2305 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2305/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2668 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2668/"
      }
    ],
    "title": "Security update for clamav",
    "tracking": {
      "current_release_date": "2026-09-20T12:03:06Z",
      "generator": {
        "date": "2015-05-11T07:27:32Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2015:0882-1",
      "initial_release_date": "2015-05-11T07:27:32Z",
      "revision_history": [
        {
          "date": "2015-05-11T07:27:32Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T12:03:06Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-0:0.98.7-13.1.ppc64le",
                "product": {
                  "name": "clamav-0:0.98.7-13.1.ppc64le",
                  "product_id": "clamav-0:0.98.7-13.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:clamav:clamav:0.98.7:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/clamav@0.98.7-13.1?arch=ppc64le\u0026upstream=clamav-0:0.98.7-13.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-0:0.98.7-13.1.s390x",
                "product": {
                  "name": "clamav-0:0.98.7-13.1.s390x",
                  "product_id": "clamav-0:0.98.7-13.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:clamav:clamav:0.98.7:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/clamav@0.98.7-13.1?arch=s390x\u0026upstream=clamav-0:0.98.7-13.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-0:0.98.7-13.1.x86_64",
                "product": {
                  "name": "clamav-0:0.98.7-13.1.x86_64",
                  "product_id": "clamav-0:0.98.7-13.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:clamav:clamav:0.98.7:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/clamav@0.98.7-13.1?arch=x86_64\u0026upstream=clamav-0:0.98.7-13.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12",
                  "product_id": "SUSE Linux Enterprise Server 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 12",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 12",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-0:0.98.7-13.1.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.ppc64le"
        },
        "product_reference": "clamav-0:0.98.7-13.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-0:0.98.7-13.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.s390x"
        },
        "product_reference": "clamav-0:0.98.7-13.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-0:0.98.7-13.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.x86_64"
        },
        "product_reference": "clamav-0:0.98.7-13.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-0:0.98.7-13.1.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.ppc64le"
        },
        "product_reference": "clamav-0:0.98.7-13.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-0:0.98.7-13.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.s390x"
        },
        "product_reference": "clamav-0:0.98.7-13.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-0:0.98.7-13.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.x86_64"
        },
        "product_reference": "clamav-0:0.98.7-13.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-0:0.98.7-13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.ppc64le"
        },
        "product_reference": "clamav-0:0.98.7-13.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-0:0.98.7-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.s390x"
        },
        "product_reference": "clamav-0:0.98.7-13.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-0:0.98.7-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.x86_64"
        },
        "product_reference": "clamav-0:0.98.7-13.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-2170",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2170"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.x86_64",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2170",
          "url": "https://www.suse.com/security/cve/CVE-2015-2170"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1040662 for CVE-2015-2170",
          "url": "https://bugzilla.suse.com/1040662"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 921950 for CVE-2015-2170",
          "url": "https://bugzilla.suse.com/921950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922560 for CVE-2015-2170",
          "url": "https://bugzilla.suse.com/922560"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 929192 for CVE-2015-2170",
          "url": "https://bugzilla.suse.com/929192"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.x86_64",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-05-11T07:27:32Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-2170"
    },
    {
      "cve": "CVE-2015-2221",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2221"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted y0da cryptor file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.x86_64",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2221",
          "url": "https://www.suse.com/security/cve/CVE-2015-2221"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1040662 for CVE-2015-2221",
          "url": "https://bugzilla.suse.com/1040662"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 921950 for CVE-2015-2221",
          "url": "https://bugzilla.suse.com/921950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922560 for CVE-2015-2221",
          "url": "https://bugzilla.suse.com/922560"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 929192 for CVE-2015-2221",
          "url": "https://bugzilla.suse.com/929192"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.x86_64",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-05-11T07:27:32Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-2221"
    },
    {
      "cve": "CVE-2015-2222",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2222"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted petite packed file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.x86_64",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2222",
          "url": "https://www.suse.com/security/cve/CVE-2015-2222"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1040662 for CVE-2015-2222",
          "url": "https://bugzilla.suse.com/1040662"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 921950 for CVE-2015-2222",
          "url": "https://bugzilla.suse.com/921950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922560 for CVE-2015-2222",
          "url": "https://bugzilla.suse.com/922560"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 929192 for CVE-2015-2222",
          "url": "https://bugzilla.suse.com/929192"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.x86_64",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-05-11T07:27:32Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-2222"
    },
    {
      "cve": "CVE-2015-2305",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2305"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.x86_64",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2305",
          "url": "https://www.suse.com/security/cve/CVE-2015-2305"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1040662 for CVE-2015-2305",
          "url": "https://bugzilla.suse.com/1040662"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 921950 for CVE-2015-2305",
          "url": "https://bugzilla.suse.com/921950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922022 for CVE-2015-2305",
          "url": "https://bugzilla.suse.com/922022"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922028 for CVE-2015-2305",
          "url": "https://bugzilla.suse.com/922028"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922030 for CVE-2015-2305",
          "url": "https://bugzilla.suse.com/922030"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922043 for CVE-2015-2305",
          "url": "https://bugzilla.suse.com/922043"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922560 for CVE-2015-2305",
          "url": "https://bugzilla.suse.com/922560"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922567 for CVE-2015-2305",
          "url": "https://bugzilla.suse.com/922567"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 929192 for CVE-2015-2305",
          "url": "https://bugzilla.suse.com/929192"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-2305",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.x86_64",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-05-11T07:27:32Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-2305"
    },
    {
      "cve": "CVE-2015-2668",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2668"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted xz archive file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.x86_64",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2668",
          "url": "https://www.suse.com/security/cve/CVE-2015-2668"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1040662 for CVE-2015-2668",
          "url": "https://bugzilla.suse.com/1040662"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 921950 for CVE-2015-2668",
          "url": "https://bugzilla.suse.com/921950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922560 for CVE-2015-2668",
          "url": "https://bugzilla.suse.com/922560"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 929192 for CVE-2015-2668",
          "url": "https://bugzilla.suse.com/929192"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12:clamav-0:0.98.7-13.1.x86_64",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise Server 12:clamav-0:0.98.7-13.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:clamav-0:0.98.7-13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-05-11T07:27:32Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-2668"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.