Lucene search

[email protected]CVE-2022-20796

HistoryMay 04, 2022 - 5:15 p.m.

CVE-2022-20796

2022-05-0417:15:08

CWE-476

CWE-822

[email protected]

web.nvd.nist.gov

124

cve

clamav

vulnerability

denial of service

nvd

security

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog.

Affected configurations

NVD

Node

clamavclamavMatch0.103.4

clamavclamavMatch0.103.5

clamavclamavMatch0.104.1

clamavclamavMatch0.104.2

Node

ciscosecure_endpointRange<1.16.3macos

ciscosecure_endpointRange<1.17.2linux

ciscosecure_endpointRange<7.5.5windows

ciscosecure_endpointRange1.18.0–1.18.2linux

ciscosecure_endpointRange1.18.0–1.18.2macos

Node

fedoraprojectfedoraMatch34

fedoraprojectfedoraMatch35

fedoraprojectfedoraMatch36

Node

debiandebian_linuxMatch9.0

CPENameOperatorVersion
clamav:clamavclamaveq0.103.4
clamav:clamavclamaveq0.103.5
clamav:clamavclamaveq0.104.1
clamav:clamavclamaveq0.104.2

CPE	Name	Operator	Version
clamav:clamav	clamav	eq	0.103.4
clamav:clamav	clamav	eq	0.103.5
clamav:clamav	clamav	eq	0.104.1
clamav:clamav	clamav	eq	0.104.2

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco AMP for Endpoints ",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]