logo

Database

Lack of data validation In clamav

Description

The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2015-21702. NVD-2015-21703. OSV-DEBIAN-2015-21704. OSV-2015-21705. SECURITY-TRACKER-CVE-2015-2170

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.