CVE-2022-20698: Clam AntiVirus (ClamAV) Denial of Service Vulnerability
First published: Fri Jan 14 2022(Updated: )
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ClamAV | <0.103.5 | |
| ClamAV | >=0.104.0<0.104.2 | |
| Debian | =9.0 | |
| Debian | =10.0 | |
| Debian | =11.0 | |
| Ubuntu | =14.04 | |
| Ubuntu | =16.04 | |
| Ubuntu | =18.04 | |
| Ubuntu | =20.04 | |
| Ubuntu | =20.10 | |
| Ubuntu | =21.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-20698?
CVE-2022-20698 is a vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) software version 0.104.1 and LTS version 0.103.4 and prior versions.
How does CVE-2022-20698 affect Clam AntiVirus?
CVE-2022-20698 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.
What is the severity of CVE-2022-20698?
CVE-2022-20698 has a severity rating of 7.5 (high).
Which software versions are affected by CVE-2022-20698?
Clam AntiVirus software version 0.104.1 and LTS version 0.103.4 and prior versions are affected by CVE-2022-20698.
How can I mitigate the CVE-2022-20698 vulnerability?
To mitigate the CVE-2022-20698 vulnerability, it is recommended to update Clam AntiVirus software to version 0.104.2 or later.
- agent/references
- agent/type
- agent/severity
- agent/weakness
- agent/title
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/clamav
- canonical/clamav
- version/clamav/0.104.0
- vendor/debian
- canonical/debian
- version/debian/9.0
- version/debian/10.0
- version/debian/11.0
- vendor/canonical
- canonical/ubuntu
- version/ubuntu/14.04
- version/ubuntu/16.04
- version/ubuntu/18.04
- version/ubuntu/20.04
- version/ubuntu/20.10
- version/ubuntu/21.04