Lucene search

CVE-2022-20785

🗓️ 04 May 2022 17:08:15Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 148 Views🌐 4 Media mentions

ClamAV HTML file parser vulnerability allows remote attackers to cause denial of service

Reporter	Title	Published	Views	Family All 54
CNVD	Clam AntiVirus Memory Leak Vulnerability	7 May 202200:00	–	cnvd
Veracode	Denial Of Service (DoS)	15 May 202216:52	–	veracode
Cvelist	CVE-2022-20785 ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022	4 May 202217:05	–	cvelist
UbuntuCve	CVE-2022-20785	4 May 202200:00	–	ubuntucve
Prion	Design/Logic Flaw	4 May 202217:15	–	prion
Cisco	ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: May 2022	4 May 202216:00	–	cisco
NVD	CVE-2022-20785	4 May 202217:15	–	nvd
Debian CVE	CVE-2022-20785	4 May 202217:15	–	debiancve
RedhatCVE	CVE-2022-20785	21 May 202200:23	–	redhatcve
CBLMariner	CVE-2022-20785 affecting package clamav 0.103.5-1	15 Jun 202217:03	–	cbl_mariner

Nvd

Node

clamav clamavRange<0.103.5

clamav clamavRange≤0.103.5lts

clamav clamavRange0.104.0–0.104.2

Node

cisco secure_endpointRange<1.16.3macos

cisco secure_endpointRange<1.17.2linux

cisco secure_endpointRange<7.5.5windows

cisco secure_endpointRange1.18.0–1.18.2linux

cisco secure_endpointRange1.18.0–1.18.2macos

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

Node

debian debian_linuxMatch9.0

[
  {
    "vendor": "Cisco",
    "product": "Cisco AMP for Endpoints",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2022/06/msg00004.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RV6BLIATIJE74SQ6NG5ZC4JK5MMDQ2R/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BX5ZXNHP4NFYQ5BFSKY3WT7NTBZUYG7L/
security	www.security.gentoo.org/glsa/202310-01
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4NNBIJVG6Z4PDIKUZXTYXICYUAYAZ56/
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-html-XAuOK8mR

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 May 2022 17:15Current

7.3High risk

Vulners AI Score7.3

CVSS27.8

CVSS37.5

EPSS0.035

SSVC

CWE-401