On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional information becomes available.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
07 Nov 2023, 03:42
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
01 Oct 2023, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Jul 2022, 18:59
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fedoraproject
Debian debian Linux Debian Fedoraproject fedora |
|
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2022/06/msg00004.html - Mailing List, Third Party Advisory | |
| References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BX5ZXNHP4NFYQ5BFSKY3WT7NTBZUYG7L/ - Mailing List, Third Party Advisory | |
| References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N4NNBIJVG6Z4PDIKUZXTYXICYUAYAZ56/ - Mailing List, Third Party Advisory | |
| References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7RV6BLIATIJE74SQ6NG5ZC4JK5MMDQ2R/ - Mailing List, Third Party Advisory | |
| CPE | cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* |
03 Jun 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
16 May 2022, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
12 May 2022, 19:23
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : 7.8
v3 : 7.5 |
| CPE | cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:macos:*:* cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:linux:*:* cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:* cpe:2.3:a:clamav:clamav:*:*:*:*:lts:*:*:* |
|
| First Time |
Cisco secure Endpoint
Cisco Clamav clamav Clamav |
|
| References | (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-dos-ZAZBwRVG - Third Party Advisory |
04 May 2022, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional information becomes available. |
04 May 2022, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-05-04 17:15
Updated : 2023-12-10 14:22
NVD link : CVE-2022-20771
Mitre link : CVE-2022-20771
CVE.ORG link : CVE-2022-20771
JSON object : View
Products Affected
fedoraproject
- fedora
debian
- debian_linux
clamav
- clamav
cisco
- secure_endpoint
CWE