Vulnerability Details : CVE-2022-20796
On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog.
Vulnerability category: Denial of service
Products affected by CVE-2022-20796
- cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:macos:*:*
- cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:macos:*:*
- cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:linux:*:*
- cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*
- cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:linux:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
- cpe:2.3:a:clamav:clamav:0.103.4:*:*:*:*:*:*:*
- cpe:2.3:a:clamav:clamav:0.103.5:*:*:*:*:*:*:*
- cpe:2.3:a:clamav:clamav:0.104.1:*:*:*:*:*:*:*
- cpe:2.3:a:clamav:clamav:0.104.2:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-20796
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 6 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-20796
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.9
|
MEDIUM | AV:L/AC:L/Au:N/C:N/I:N/A:C |
3.9
|
6.9
|
NIST | |
6.5
|
MEDIUM | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H |
2.0
|
4.0
|
Cisco Systems, Inc. | |
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2022-20796
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
-
The product dereferences a pointer that it expects to be valid but is NULL.Assigned by: nvd@nist.gov (Primary)
-
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.Assigned by: ykramarz@cisco.com (Secondary)
References for CVE-2022-20796
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-dos-vL9x58p4
ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022Third Party Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7RV6BLIATIJE74SQ6NG5ZC4JK5MMDQ2R/
[SECURITY] Fedora 36 Update: clamav-0.103.6-1.fc36 - package-announce - Fedora Mailing-ListsMailing List;Third Party Advisory
-
https://security.gentoo.org/glsa/202310-01
ClamAV: Multiple Vulnerabilities (GLSA 202310-01) — Gentoo security
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N4NNBIJVG6Z4PDIKUZXTYXICYUAYAZ56/
[SECURITY] Fedora 35 Update: clamav-0.103.6-1.fc35 - package-announce - Fedora Mailing-ListsMailing List;Third Party Advisory
-
https://lists.debian.org/debian-lts-announce/2022/06/msg00004.html
[SECURITY] [DLA 3042-1] clamav security updateMailing List;Third Party Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BX5ZXNHP4NFYQ5BFSKY3WT7NTBZUYG7L/
[SECURITY] Fedora 34 Update: clamav-0.103.6-1.fc34 - package-announce - Fedora Mailing-ListsMailing List;Third Party Advisory
Jump to