SUSE SLES12 Security Update : clamav (SUSE-SU-2022:0358-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0358-1 advisory. - CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. bsc1194731 Tenable has extracted the preceding description...

CVE-2022-20698

A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that m...

CVE-2022-20698: Improper Input Validation

A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that m...

PT-2022-1458

Name of the Vulnerable Software and Affected Versions Clam AntiVirus versions 0.103.4 and prior versions Clam AntiVirus version 0.104.1 Description The issue is related to insufficient input validation in the OOXML parsing module. An attacker could exploit this by sending a specially crafted OOXM...