Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-20771
HistoryMay 04, 2022 - 5:15 p.m.

CVE-2022-20771

2022-05-0417:15:08
CWE-399
[email protected]
web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.011 Low

EPSS

Percentile

84.9%

JSON

On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional information becomes available.

Affected configurations

NVD
Node
clamavclamavRange≤0.103.5lts
OR
clamavclamavRange0.104.0–0.104.2
Node
ciscosecure_endpointRange<1.16.3macos
OR
ciscosecure_endpointRange<1.17.2linux
OR
ciscosecure_endpointRange<7.5.5windows
OR
ciscosecure_endpointRange1.18.0–1.18.2linux
OR
ciscosecure_endpointRange1.18.0–1.18.2macos
Node
fedoraprojectfedoraMatch34
OR
fedoraprojectfedoraMatch35
OR
fedoraprojectfedoraMatch36
Node
debiandebian_linuxMatch9.0

Related

alpinelinux 1
debiancve 1
cnvd 1
cve 1
veracode 1
nessus 13
cbl_mariner 2
ubuntucve 1
cisco 1
osv 4
cvelist 1
prion 1
fedora 3
amazon 1
openvas 10
debian 1
suse 1
ubuntu 2
mageia 1
altlinux 3
freebsd 1
redos 1
gentoo 1
alpinelinux
alpinelinux
CVE-2022-20771
2022-05-04 17:15:08
debiancve
debiancve
CVE-2022-20771
2022-05-04 17:15:08
cnvd
cnvd
Clam AntiVirus Resource Management Error Vulnerability
2022-05-07 00:00:00
cve
cve
CVE-2022-20771
2022-05-04 17:15:08
veracode
veracode
Denial Of Service (DoS)
2022-05-15 17:03:31
nessus
nessus
CBL Mariner 2.0 Security Update: clamav (CVE-2022-20771)
2023-03-28 00:00:00
Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 35 / 9.0.0 < 9.0.0 Patch 28 Multiple Vulnerabilities
2022-11-29 00:00:00
Amazon Linux AMI : clamav (ALAS-2022-1621)
2022-08-05 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-20771 affecting package clamav for versions less than 0.105.0-1
2022-07-01 21:02:47
CVE-2022-20771 affecting package clamav 0.103.5-1
2022-06-15 17:03:10
ubuntucve
ubuntucve
CVE-2022-20771
2022-05-04 00:00:00
cisco
cisco
ClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: May 2022
2022-05-04 16:00:00
osv
osv
CVE-2022-20771
2022-05-04 17:15:08
clamav vulnerabilities
2022-05-17 11:35:36
clamav vulnerabilities
2022-05-17 15:36:09
cvelist
cvelist
CVE-2022-20771 ClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022
2022-05-04 00:00:00
prion
prion
Design/Logic Flaw
2022-05-04 17:15:00
fedora
fedora
[SECURITY] Fedora 34 Update: clamav-0.103.6-1.fc34
2022-05-16 01:45:20
[SECURITY] Fedora 35 Update: clamav-0.103.6-1.fc35
2022-05-16 02:07:04
[SECURITY] Fedora 36 Update: clamav-0.103.6-1.fc36
2022-05-16 01:09:27
amazon
amazon
Important: clamav
2022-07-28 20:34:00
openvas
openvas
Fedora: Security Advisory for clamav (FEDORA-2022-0ac71a8f3a)
2022-05-17 00:00:00
Fedora: Security Advisory for clamav (FEDORA-2022-b8691af27b)
2022-05-17 00:00:00
Fedora: Security Advisory for clamav (FEDORA-2022-a910a41a17)
2022-05-17 00:00:00
debian
debian
[SECURITY] [DLA 3042-1] clamav security update
2022-06-03 16:55:36
suse
suse
Security update for clamav (important)
2022-05-12 00:00:00
ubuntu
ubuntu
ClamAV vulnerabilities
2022-05-17 00:00:00
ClamAV vulnerabilities
2022-05-17 00:00:00
mageia
mageia
Updated clamav packages fix security vulnerability
2022-05-15 13:06:40
altlinux
altlinux
Security fix for the ALT Linux 8 package clamav version 0.103.6-alt1
2022-05-25 00:00:00
Security fix for the ALT Linux 10 package clamav version 0.103.6-alt1
2022-05-23 00:00:00
Security fix for the ALT Linux 9 package clamav version 0.103.6-alt1
2022-05-24 00:00:00
freebsd
freebsd
clamav -- Multiple vulnerabilities
2022-05-04 00:00:00
redos
redos
ROS-20220608-01
2022-06-08 00:00:00
gentoo
gentoo
ClamAV: Multiple Vulnerabilities
2023-10-01 00:00:00

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.011 Low

EPSS

Percentile

84.9%

JSON
Related for NVD:CVE-2022-20771
alpinelinux1debiancve1cnvd1cve1veracode1nessus13cbl_mariner2ubuntucve1cisco1osv4cvelist1prion1fedora3amazon1openvas10debian1suse1ubuntu2mageia1altlinux3freebsd1redos1gentoo1