CVE-2022-20796
CVE-2022-20796 · ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog.
CVSS 6.5 · Media · EPSS 0,4% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
cisco amp for endpoints
- Versiones
- n/a: Afectada
Sin corrección publicada
clamav Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.103.6+dfsg-1
Actualiza a 0.103.6+dfsg-1
clamav Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.103.6+dfsg-1
Actualiza a 0.103.6+dfsg-1
clamav Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.103.6+dfsg-1
Actualiza a 0.103.6+dfsg-1
clamav Ubuntu:Pro:14.04:LTS
- Versiones
- 0.97.8+dfsg-1ubuntu4
- 0.97.8+dfsg-1ubuntu5
- 0.98.1+dfsg-1ubuntu4
- 0.98.1+dfsg-1ubuntu5
- 0.98.1+dfsg-2ubuntu2
- 0.98.1+dfsg-4ubuntu1
- 0.98.1+dfsg-4ubuntu1.1
- 0.98.5+addedllvm-0ubuntu0.14.04.1
- 0.98.6+dfsg-0ubuntu0.14.04.1
- 0.98.7+dfsg-0ubuntu0.14.04.1
- 0.99.2+addedllvm-0ubuntu0.14.04.1
- 0.99.2+addedllvm-0ubuntu0.14.04.2
- 0.99.3+addedllvm-0ubuntu0.14.04.1
- 0.99.4+addedllvm-0ubuntu0.14.04.1
- 0.100.1+dfsg-1ubuntu0.14.04.1
- 0.100.1+dfsg-1ubuntu0.14.04.2
- 0.100.1+dfsg-1ubuntu0.14.04.3
- 0.100.1+dfsg-1ubuntu0.14.04.4
- 0.100.2+dfsg-1ubuntu0.14.04.1
- 0.100.2+dfsg-1ubuntu0.14.04.2
- 0.100.3+dfsg-0ubuntu0.14.04.1
- 0.100.3+dfsg-0ubuntu0.14.04.1+esm1
- 0.101.4+dfsg-0ubuntu0.14.04.1+esm1
- 0.102.1+dfsg-0ubuntu0.14.04.1+esm1
- 0.102.2+dfsg-0ubuntu0.14.04.1+esm1
- 0.102.3+dfsg-0ubuntu0.14.04.1+esm1
- 0.102.4+dfsg-0ubuntu0.14.04.1+esm1
- 0.103.2+dfsg-0ubuntu0.14.04.1+esm1
- 0.103.2+dfsg-0ubuntu0.14.04.1+esm2
- 0.103.5+dfsg-0ubuntu0.14.04.1+esm1
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.103.6+dfsg-0ubuntu0.14.04.1+esm1
Actualiza a 0.103.6+dfsg-0ubuntu0.14.04.1+esm1
clamav Ubuntu:Pro:16.04:LTS
- Versiones
- 0.98.7+dfsg-0ubuntu4
- 0.98.7+dfsg-0ubuntu5
- 0.99+dfsg-1ubuntu1
- 0.99+dfsg-1ubuntu1.1
- 0.99+dfsg-1ubuntu1.2
- 0.99.2+dfsg-0ubuntu0.16.04.1
- 0.99.2+dfsg-0ubuntu0.16.04.2
- 0.99.2+dfsg-0ubuntu0.16.04.3
- 0.99.3+addedllvm-0ubuntu0.16.04.1
- 0.99.4+addedllvm-0ubuntu0.16.04.1
- 0.100.1+dfsg-1ubuntu0.16.04.1
- 0.100.1+dfsg-1ubuntu0.16.04.2
- 0.100.1+dfsg-1ubuntu0.16.04.3
- 0.100.2+dfsg-1ubuntu0.16.04.1
- 0.100.3+dfsg-0ubuntu0.16.04.1
- 0.101.4+dfsg-0ubuntu0.16.04.1
- 0.102.1+dfsg-0ubuntu0.16.04.2
- 0.102.2+dfsg-0ubuntu0.16.04.1
- 0.102.3+dfsg-0ubuntu0.16.04.1
- 0.102.4+dfsg-0ubuntu0.16.04.1
- 0.103.2+dfsg-0ubuntu0.16.04.1
- 0.103.2+dfsg-0ubuntu0.16.04.1+esm1
- 0.103.5+dfsg-0ubuntu0.16.04.1+esm1
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.103.6+dfsg-0ubuntu0.16.04.1+esm1
Actualiza a 0.103.6+dfsg-0ubuntu0.16.04.1+esm1
clamav Ubuntu:18.04:LTS
- Versiones
- 0.99.2+dfsg-6ubuntu2
- 0.99.3~beta1+dfsg-2ubuntu1
- 0.99.3~beta1+dfsg-2ubuntu2
- 0.99.3+addedllvm-0ubuntu1
- 0.99.3+addedllvm-0ubuntu2
- 0.99.4+addedllvm-0ubuntu1
- 0.100.1+dfsg-1ubuntu0.18.04.1
- 0.100.1+dfsg-1ubuntu0.18.04.2
- 0.100.1+dfsg-1ubuntu0.18.04.3
- 0.100.2+dfsg-1ubuntu0.18.04.1
- 0.100.3+dfsg-0ubuntu0.18.04.1
- 0.101.4+dfsg-0ubuntu0.18.04.1
- 0.102.1+dfsg-0ubuntu0.18.04.2
- 0.102.2+dfsg-0ubuntu0.18.04.1
- 0.102.3+dfsg-0ubuntu0.18.04.1
- 0.102.4+dfsg-0ubuntu0.18.04.1
- 0.103.2+dfsg-0ubuntu0.18.04.1
- 0.103.2+dfsg-0ubuntu0.18.04.2
- 0.103.2+dfsg-0ubuntu0.18.04.3
- 0.103.5+dfsg-0ubuntu0.18.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.103.6+dfsg-0ubuntu0.18.04.1
Actualiza a 0.103.6+dfsg-0ubuntu0.18.04.1
clamav Ubuntu:20.04:LTS
- Versiones
- 0.101.4+dfsg-1ubuntu1
- 0.102.1+dfsg-1ubuntu1
- 0.102.1+dfsg-2ubuntu1
- 0.102.1+dfsg-2ubuntu2
- 0.102.2+dfsg-1ubuntu1
- 0.102.2+dfsg-2ubuntu1
- 0.102.3+dfsg-0ubuntu0.20.04.1
- 0.102.4+dfsg-0ubuntu0.20.04.1
- 0.103.2+dfsg-0ubuntu0.20.04.1
- 0.103.2+dfsg-0ubuntu0.20.04.2
- 0.103.5+dfsg-1~20.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.103.6+dfsg-0ubuntu0.20.04.1
Actualiza a 0.103.6+dfsg-0ubuntu0.20.04.1
clamav Ubuntu:22.04:LTS
- Versiones
- 0.103.3+dfsg-1
- 0.103.4+dfsg-1
- 0.103.4+dfsg-1build1
- 0.103.5+dfsg-1
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.103.6+dfsg-0ubuntu0.22.04.1
Actualiza a 0.103.6+dfsg-0ubuntu0.22.04.1
Fuentes originales
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-dos-vL9x58p4
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RV6BLIATIJE74SQ6NG5ZC4JK5MMDQ2R/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4NNBIJVG6Z4PDIKUZXTYXICYUAYAZ56/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BX5ZXNHP4NFYQ5BFSKY3WT7NTBZUYG7L/
- https://lists.debian.org/debian-lts-announce/2022/06/msg00004.html
- https://security.gentoo.org/glsa/202310-01
- https://nvd.nist.gov/vuln/detail/CVE-2022-20796