CVE-2015-1463 — Clamav vulnerability

CWE-174 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
1.9%
top 16.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
ClamavDebian ClamavFedoraproject Fedora
Timeline
PublishedFeb 3
Latest updateMay 17

Description

ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted petite packer file, related to an "incorrect compiler optimization."

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/clamav< clamav 0.98.6+dfsg-1 (bookworm)
▶Debianclamav/clamav< 0.98.6+dfsg-1+3
▶NVDclamav/clamav0.98.5

Also affects: Fedora 20, 21

🔴Vulnerability Details

2
GHSA
GHSA-h4wr-jgfj-c79q: ClamAV before 0↗2022-05-17
▶
OSV
CVE-2015-1463: ClamAV before 0↗2015-02-03
▶

📋Vendor Advisories

1
Debian
CVE-2015-1463: clamav - ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash...↗2015
▶