CVE-2022-20771

published 2022-05-04

CVE-2022-20771: On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A…

Priority P3 46 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional information becomes available.

Affected

23 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_amp_for_endpoints	—	—
cisco	secure_endpoint	< 1.16.3	1.16.3
cisco	secure_endpoint	< 1.17.2	1.17.2
cisco	secure_endpoint	< 7.5.5	7.5.5
cisco	secure_endpoint	>= 1.18.0 < 1.18.2	1.18.2
clamav	clamav	<= 0.103.5	—
clamav	clamav	>= 0 < 0.103.6+dfsg-0+deb11u1	0.103.6+dfsg-0+deb11u1
clamav	clamav	>= 0 < 0.103.6+dfsg-1	0.103.6+dfsg-1
clamav	clamav	>= 0 < 0.103.6+dfsg-1	0.103.6+dfsg-1
clamav	clamav	>= 0 < 0.103.6+dfsg-1	0.103.6+dfsg-1
clamav	clamav	>= 0 < 0.103.6+dfsg-0ubuntu0.18.04.1	0.103.6+dfsg-0ubuntu0.18.04.1
clamav	clamav	>= 0 < 0.103.6+dfsg-0ubuntu0.20.04.1	0.103.6+dfsg-0ubuntu0.20.04.1
clamav	clamav	>= 0 < 0.103.6+dfsg-0ubuntu0.22.04.1	0.103.6+dfsg-0ubuntu0.22.04.1
clamav	clamav	>= 0 < 0.103.6+dfsg-0ubuntu0.14.04.1+esm1	0.103.6+dfsg-0ubuntu0.14.04.1+esm1
clamav	clamav	>= 0 < 0.103.6+dfsg-0ubuntu0.16.04.1+esm1	0.103.6+dfsg-0ubuntu0.16.04.1+esm1
clamav	clamav	0.104.0 – 0.104.2	—
debian	clamav	< clamav 0.103.6+dfsg-1 (bookworm)	clamav 0.103.6+dfsg-1 (bookworm)
debian	debian_linux	—	—
fedoraproject	fedora	—	—
fedoraproject	fedora	—	—
fedoraproject	fedora	—	—
msrc	cbl2_clamav_0.105.0-1_on_cbl_mariner_2.0	—	—
msrc	cm1_clamav_0.103.6-1_on_cbl_mariner_1.0	—	—

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 7.8 HIGH AV:N/AC:L/Au:N/C:N/I:N/A:C

osv 7.5 HIGH

vendor_ubuntu 8.6 HIGH

vendor_cisco 7.5 HIGH

vendor_debian 7.5 HIGH

vendor_msrc 7.5 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-399