CVE-2015-2221: ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted y0d...

Security readout for executives and security teams

CVE-2015-2221 is a denial-of-service flaw in ClamAV before 0.98.7. A specially crafted y0da cryptor file can make the scanner enter an infinite loop, potentially delaying or stopping malware scanning on systems that process untrusted files. Exposure is most likely where ClamAV before 0.98.7 scans untrusted files, email attachments, uploads, or file shares. Distribution packages may be affected if they shipped vulnerable ClamAV builds. Treat this as a service reliability risk for systems relying on ClamAV. It is old and not listed as actively exploited, but vulnerable scanners processing untrusted files can be disrupted until patched. Mitigation focus: Upgrade ClamAV to 0.98.7 or a vendor-supported fixed package.; Apply relevant Ubuntu, Gentoo, or openSUSE security updates where applicable.; Restart clamd and dependent scanning services after package updates..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.