CVE-2022-20796CWE-822

ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022

Medium · published May 4, 2022

CVSS v3.1
6.5
EPSS
0%
Percentile
31.7
In the wild
Unconfirmed
What it is

On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00388 · 31.7th percentile
Weakness
CWE-822 · Untrusted Pointer Dereference
Published
2022-05-04T17:06Z
EPSS history
Timeline
  • 04 MAY 17:06Z
    ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022
    cvelistv5