Tracker / CVE-2022-20785
CVE-2022-20785
High 7.5
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional information becomes available.
Affected products and versions
| cisco | secure_endpoint · … → 1.16.3 |
|---|---|
| cisco | secure_endpoint · … → 1.17.2 |
| cisco | secure_endpoint · … → 7.5.5 |
| cisco | secure_endpoint · 1.18.0 → 1.18.2 |
| clamav | clamav · … → 0.103.5 |
| clamav | clamav · 0.104.0 → 0.104.2 |
| debian | debian_linux |
| fedoraproject | fedora |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.