Vulnerability · Published May 4, 2022 · Assigned by cisco
CVE-2022-20796ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022
Medium 6.5
In plain English
A medium-severity security flaw in Cisco AMP for Endpoints from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | clamav | 0.103.6+dfsg-1 | DEBIAN-CVE-2022-20796 |
| Debian:13 | clamav | 0.103.6+dfsg-1 | DEBIAN-CVE-2022-20796 |
| Debian:14 | clamav | 0.103.6+dfsg-1 | DEBIAN-CVE-2022-20796 |
| Ubuntu:22.04:LTS | clamav | 0.103.6+dfsg-0ubuntu0.22.04.1 | USN-5423-1 |
| Ubuntu:22.04:LTS | clamav | 0.103.6+dfsg-0ubuntu0.22.04.1 | UBUNTU-CVE-2022-20796 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco AMP for Endpoints | n/a |
Weakness: CWE-822 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
References
- 20220504 ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022 vendor-advisory
- FEDORA-2022-b8691af27b vendor-advisory
- FEDORA-2022-0ac71a8f3a vendor-advisory
- FEDORA-2022-a910a41a17 vendor-advisory
- [debian-lts-announce] 20220603 [SECURITY] [DLA 3042-1] clamav security update mailing-list
- GLSA-202310-01 vendor-advisory