ID de Prueba:	1.3.6.1.4.1.25623.1.0.806019
Categoría:	Denial of Service
Título:	ClamAV < 0.98.7 Multiple DoS Vulnerabilities - Linux
Resumen:	ClamAV is prone to multiple denial of service (DoS) vulnerabilities.
Descripción:	Summary: ClamAV is prone to multiple denial of service (DoS) vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - an error that is triggered when handling a specially crafted xz archive file, which can cause an infinite loops. - an error in the 'cli_scanpe' function in pe.c script that is triggered when handling petite packed files. - an error in the 'yc_poly_emulator' function in yc.c script that is triggered when handling a specially crafted y0da cryptor file. - an error in the 'pefromupx' function of the UPX decoder that is triggered when handling specially crafted files. Vulnerability Impact: Successful exploitation will allow a remote attacker to crash the application. Affected Software/OS: ClamAV versions before 0.98.7. Solution: Update to version 0.98.7 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2668 BugTraq ID: 74472 http://www.securityfocus.com/bid/74472 https://security.gentoo.org/glsa/201512-08 SuSE Security Announcement: openSUSE-SU-2015:0906 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html http://ubuntu.com/usn/usn-2594-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-2222 BugTraq ID: 74443 http://www.securityfocus.com/bid/74443 Common Vulnerability Exposure (CVE) ID: CVE-2015-2221 Common Vulnerability Exposure (CVE) ID: CVE-2015-2170
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.