SUSE SLES12 Security Update : clamav (SUSE-SU-2022:0358-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0358-1 advisory. - CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. bsc1194731 Tenable has extracted the preceding description...

CVE-2022-20698: Improper Input Validation

A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that m...