Advisory ROSA-SA-2023-2285

software: clamav 0.103.8 WASP: ROSA-CHROME packageevrstring: clamav-0.103.8-1.src.rpm CVE-ID: CVE-2022-20698 BDU-ID: 2022-00587 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the Clam AntiVirus software package is related to insufficient input validation. Exploitation of the vulnerability could...

Amazon Linux 2022 : clamav, clamav-data, clamav-devel (ALAS2022-2022-090)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-090 advisory. A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause...

Amazon Linux 2022 : clamav, clamav-data, clamav-devel (ALAS2022-2022-063)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-063 advisory. A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial...

Ubuntu: Security Advisory (USN-5233-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-20698 affecting package clamav for versions less than 0.104.2-1

CVE-2022-20698 affecting package clamav for versions less than 0.104.2-1. An upgraded version of the package is available that resolves this issue...

openSUSE 15 Security Update : clamav (openSUSE-SU-2022:0493-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0493-1 advisory. - A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could all...

SUSE SLED15 / SLES15 Security Update : clamav (SUSE-SU-2022:0493-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0493-1 advisory. - A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior...

SUSE-SU-2022:0493-1 Security update for clamav

This update for clamav fixes the following issues: - CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. bsc1194731...

Security update for clamav (important)

openSUSE Security Update: Security update for clamav Announcement ID: openSUSE-SU-2022:0493-1 Rating: important References: 1194731 Cross-References: CVE-2022-20698 CVSS scores: CVE-2022-20698 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Le...

SUSE: Security Advisory (SUSE-SU-2022:0358-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : clamav (SUSE-SU-2022:0358-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0358-1 advisory. - CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. bsc1194731 Tenable has extracted the preceding description...

SUSE-SU-2022:0358-1 Security update for clamav

This update for clamav fixes the following issues: - CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. bsc1194731...

OESA-2022-1508 clamav security update

End-user tools for the Clam Antivirus scanner. Security Fixes: A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an...

SUSE SLES11 Security Update : clamav (SUSE-SU-2022:14882-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:14882-1 advisory. - A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow...

Security fix for the ALT Linux 9 package clamav version 0.103.5-alt1

0.103.5-alt1 built Jan. 25, 2022 Sergey Y. Afonin in task 293907 Jan. 18, 2022 Sergey Y. Afonin - 0.103.5 CVE-2022-20698...

SUSE: Security Advisory (SUSE-SU-2022:0160-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:0160-1 Security update for clamav

This update for clamav fixes the following issues: - CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. bsc1194731...

Security fix for the ALT Linux 10 package clamav version 0.103.5-alt1

0.103.5-alt1 built Jan. 21, 2022 Sergey Y. Afonin in task 293675 Jan. 18, 2022 Sergey Y. Afonin - 0.103.5 CVE-2022-20698...

Ubuntu 16.04 ESM : ClamAV vulnerability (USN-5233-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5233-2 advisory. USN-5233-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted the...

Ubuntu 18.04 LTS / 20.04 LTS : ClamAV vulnerability (USN-5233-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5233-1 advisory. It was discovered that ClamAV incorrectly handled memory when the CLSCANGENERALCOLLECTMETADATA scan option was enabled. A remote attacker could possib...