CVE-2022-20698
Clam AntiVirus (ClamAV) Denial of Service Vulnerability
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Clam AntiVirus (ClamAV) Denial of Service Vulnerability
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
- Record
CVE-2022-20698- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2022-25948
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
- Record
EUVD-2022-25948- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q493-fq52-3qhm
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1...
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
- Record
GHSA-q493-fq52-3qhm- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20, CWE-125
- Updated
- 2026-11-02
NVD
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
- Record
CVE-2022-20698- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20, CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-20698
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
- Record
ALPINE-CVE-2022-20698- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVAZL-7532
CVE-2022-20698 affecting package clamav for versions less than 0.104.2-1
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
- Record
AZL-7532- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 14 moreShow less
OSV
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
- Record
CVE-2022-20698- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-20698
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
- Record
DEBIAN-CVE-2022-20698- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVOESA-2022-1508
clamav security update
End-user tools for the Clam Antivirus scanner.
Security Fix(es):
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.(CVE-2022-20698)
- Record
OESA-2022-1508- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-20698
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
- Record
UBUNTU-CVE-2022-20698- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2024-1725385588 No score
clamav: Fix of 2 CVEs
- Update to 0.103.11
- CVE-2023-20032: fix missing buffer size check that may result in a heap buffer overflow write
- Don't apply clamav-check.patch and CVE-2022-20698.patch as they have already been applied in new 0.103.11 version
- Don't apply clamav-clamonacc-service.patch since el6 doesn't have systemd and service file is useless
- Record
CLSA-2024-1725385588- Updated
- 2026-11-02
OSVMGASA-2022-0024 No score
Updated clamav packages fix security vulnerability
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition. (CVE-2022-20698)
- Record
MGASA-2022-0024- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:0493-1 No score
Security update for clamav
This update for clamav fixes the following issues:
- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)
- Record
openSUSE-SU-2022:0493-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11748-1 No score
clamav-0.103.5-1.1 on GA media
These are all security issues fixed in the clamav-0.103.5-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11748-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0160-1 No score
Security update for clamav
This update for clamav fixes the following issues:
- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)
- Record
SUSE-SU-2022:0160-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0358-1 No score
Security update for clamav
This update for clamav fixes the following issues:
- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)
- Record
SUSE-SU-2022:0358-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0493-1 No score
Security update for clamav
This update for clamav fixes the following issues:
- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)
- Record
SUSE-SU-2022:0493-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:14882-1 No score
Security update for clamav
This update for clamav fixes the following issues:
- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)
- Record
SUSE-SU-2022:14882-1- Updated
- 2026-11-02
OSVUSN-5233-1 No score
clamav vulnerability
It was discovered that ClamAV incorrectly handled memory when the CL_SCAN_GENERAL_COLLECT_METADATA scan option was enabled. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service.
- Record
USN-5233-1- Updated
- 2026-11-02
OSVUSN-5233-2 No score
clamav vulnerability
USN-5233-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that ClamAV incorrectly handled memory when the CL_SCAN_GENERAL_COLLECT_METADATA scan option was enabled. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service.
- Record
USN-5233-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clamavAlpine:v3.12 |
0.104.0 up to 0.103.6-r0 | 0.103.6-r0 |
clamavAlpine:v3.13 |
0.104.0 up to 0.103.6-r0 | 0.103.6-r0 |
clamavAlpine:v3.15 |
0.104.0 up to 0.104.2-r0 | 0.104.2-r0 |
clamavAlpine:v3.16 |
0.104.0 up to 0.104.2-r0 | 0.104.2-r0 |
clamavAlpine:v3.17 |
0.104.0 up to 0.104.2-r0 | 0.104.2-r0 |
clamavAlpine:v3.18 |
0.104.0 up to 0.104.2-r0 | 0.104.2-r0 |
clamavAlpine:v3.19 |
0.104.0 up to 0.104.2-r0 | 0.104.2-r0 |
clamavAlpine:v3.20 |
0.104.0 up to 0.104.2-r0 | 0.104.2-r0 |
clamavAlpine:v3.21 |
0.104.0 up to 0.104.2-r0 | 0.104.2-r0 |
clamavAlpine:v3.22 |
0.104.0 up to 0.104.2-r0 | 0.104.2-r0 |
Show 61 moreShow less
| Package | Affected | Fixed |
|---|---|---|
clamavAlpine:v3.23 |
0.104.0 up to 0.104.2-r0 | 0.104.2-r0 |
clamavAlpine:v3.24 |
0.104.0 up to 0.104.2-r0 | 0.104.2-r0 |
clamavAzure Linux:2 |
before 0.104.2-1 | 0.104.2-1 |
clamavTuxCare:CentOS:6 From an advisory covering 2 CVEs |
before 0.103.11-1.el6.tuxcare.els1 | 0.103.11-1.el6.tuxcare.els1 |
clamav-dataTuxCare:CentOS:6 From an advisory covering 2 CVEs |
before 0.103.11-1.el6.tuxcare.els1 | 0.103.11-1.el6.tuxcare.els1 |
clamav-develTuxCare:CentOS:6 From an advisory covering 2 CVEs |
before 0.103.11-1.el6.tuxcare.els1 | 0.103.11-1.el6.tuxcare.els1 |
clamav-filesystemTuxCare:CentOS:6 From an advisory covering 2 CVEs |
before 0.103.11-1.el6.tuxcare.els1 | 0.103.11-1.el6.tuxcare.els1 |
clamav-libTuxCare:CentOS:6 From an advisory covering 2 CVEs |
before 0.103.11-1.el6.tuxcare.els1 | 0.103.11-1.el6.tuxcare.els1 |
clamav-milterTuxCare:CentOS:6 From an advisory covering 2 CVEs |
before 0.103.11-1.el6.tuxcare.els1 | 0.103.11-1.el6.tuxcare.els1 |
clamav-updateTuxCare:CentOS:6 From an advisory covering 2 CVEs |
before 0.103.11-1.el6.tuxcare.els1 | 0.103.11-1.el6.tuxcare.els1 |
clamdTuxCare:CentOS:6 From an advisory covering 2 CVEs |
before 0.103.11-1.el6.tuxcare.els1 | 0.103.11-1.el6.tuxcare.els1 |
clamavDebian:12 |
before 0.103.5+dfsg-1 | 0.103.5+dfsg-1 |
clamavDebian:13 |
before 0.103.5+dfsg-1 | 0.103.5+dfsg-1 |
clamavDebian:14 |
before 0.103.5+dfsg-1 | 0.103.5+dfsg-1 |
clamavMageia:8 |
before 0.103.5-1.mga8 | 0.103.5-1.mga8 |
clamavopenEuler:20.03-LTS-SP1 |
before 0.103.2-4.oe1 | 0.103.2-4.oe1 |
clamavopenEuler:20.03-LTS-SP2 |
before 0.103.2-4.oe1 | 0.103.2-4.oe1 |
clamavopenEuler:20.03-LTS-SP3 |
before 0.103.2-5.oe1 | 0.103.2-5.oe1 |
clamavSUSE:Linux Enterprise Server 12 SP5 |
before 0.103.5-3.15.1 | 0.103.5-3.15.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 0.103.5-3.15.1 | 0.103.5-3.15.1 |
clamavSUSE:HPE Helion OpenStack 8 |
before 0.103.5-33.44.1 | 0.103.5-33.44.1 |
clamavSUSE:OpenStack Cloud 8 |
before 0.103.5-33.44.1 | 0.103.5-33.44.1 |
clamavSUSE:OpenStack Cloud 9 |
before 0.103.5-33.44.1 | 0.103.5-33.44.1 |
clamavSUSE:OpenStack Cloud Crowbar 8 |
before 0.103.5-33.44.1 | 0.103.5-33.44.1 |
clamavSUSE:OpenStack Cloud Crowbar 9 |
before 0.103.5-33.44.1 | 0.103.5-33.44.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 0.103.5-33.44.1 | 0.103.5-33.44.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 0.103.5-33.44.1 | 0.103.5-33.44.1 |
clamavSUSE:Linux Enterprise Server 12 SP2-BCL |
before 0.103.5-33.44.1 | 0.103.5-33.44.1 |
clamavSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 0.103.5-33.44.1 | 0.103.5-33.44.1 |
clamavSUSE:Linux Enterprise Server 12 SP3-BCL |
before 0.103.5-33.44.1 | 0.103.5-33.44.1 |
clamavSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 0.103.5-33.44.1 | 0.103.5-33.44.1 |
clamavSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise Real Time 15 SP2 |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise Server 15-LTSS |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise Server 15 SP1-BCL |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise Server 15 SP2-BCL |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 15 |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Manager Proxy 4.1 |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Manager Retail Branch Server 4.1 |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Manager Server 4.1 |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Enterprise Storage 6 |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavSUSE:Enterprise Storage 7 |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamav-openssl1SUSE:Linux Enterprise Server 11-SECURITY |
before 0.103.5-0.20.44.1 | 0.103.5-0.20.44.1 |
clamavSUSE:Linux Enterprise Point of Sale 11 SP3 |
before 0.103.5-0.20.44.1 | 0.103.5-0.20.44.1 |
clamavSUSE:Linux Enterprise Server 11 SP4-LTSS |
before 0.103.5-0.20.44.1 | 0.103.5-0.20.44.1 |
clamavUbuntu:Pro:14.04:LTS |
before 0.103.5+dfsg-0ubuntu0.14.04.1+esm1, plus listed versions 0.97.8+dfsg-1ubuntu40.97.8+dfsg-1ubuntu50.98.1+dfsg-1ubuntu40.98.1+dfsg-1ubuntu50.98.1+dfsg-2ubuntu2 Show 24 moreShow less0.98.1+dfsg-4ubuntu10.98.1+dfsg-4ubuntu1.10.98.5+addedllvm-0ubuntu0.14.04.10.98.6+dfsg-0ubuntu0.14.04.10.98.7+dfsg-0ubuntu0.14.04.10.99.2+addedllvm-0ubuntu0.14.04.10.99.2+addedllvm-0ubuntu0.14.04.20.99.3+addedllvm-0ubuntu0.14.04.10.99.4+addedllvm-0ubuntu0.14.04.10.100.1+dfsg-1ubuntu0.14.04.10.100.1+dfsg-1ubuntu0.14.04.20.100.1+dfsg-1ubuntu0.14.04.30.100.1+dfsg-1ubuntu0.14.04.40.100.2+dfsg-1ubuntu0.14.04.10.100.2+dfsg-1ubuntu0.14.04.20.100.3+dfsg-0ubuntu0.14.04.10.100.3+dfsg-0ubuntu0.14.04.1+esm10.101.4+dfsg-0ubuntu0.14.04.1+esm10.102.1+dfsg-0ubuntu0.14.04.1+esm10.102.2+dfsg-0ubuntu0.14.04.1+esm10.102.3+dfsg-0ubuntu0.14.04.1+esm10.102.4+dfsg-0ubuntu0.14.04.1+esm10.103.2+dfsg-0ubuntu0.14.04.1+esm10.103.2+dfsg-0ubuntu0.14.04.1+esm2 |
0.103.5+dfsg-0ubuntu0.14.04.1+esm1 |
clamavUbuntu:Pro:16.04:LTS |
before 0.103.5+dfsg-0ubuntu0.16.04.1+esm1, plus listed versions 0.98.7+dfsg-0ubuntu40.98.7+dfsg-0ubuntu50.99+dfsg-1ubuntu10.99+dfsg-1ubuntu1.10.99+dfsg-1ubuntu1.2 Show 17 moreShow less0.99.2+dfsg-0ubuntu0.16.04.10.99.2+dfsg-0ubuntu0.16.04.20.99.2+dfsg-0ubuntu0.16.04.30.99.3+addedllvm-0ubuntu0.16.04.10.99.4+addedllvm-0ubuntu0.16.04.10.100.1+dfsg-1ubuntu0.16.04.10.100.1+dfsg-1ubuntu0.16.04.20.100.1+dfsg-1ubuntu0.16.04.30.100.2+dfsg-1ubuntu0.16.04.10.100.3+dfsg-0ubuntu0.16.04.10.101.4+dfsg-0ubuntu0.16.04.10.102.1+dfsg-0ubuntu0.16.04.20.102.2+dfsg-0ubuntu0.16.04.10.102.3+dfsg-0ubuntu0.16.04.10.102.4+dfsg-0ubuntu0.16.04.10.103.2+dfsg-0ubuntu0.16.04.10.103.2+dfsg-0ubuntu0.16.04.1+esm1 |
0.103.5+dfsg-0ubuntu0.16.04.1+esm1 |
clamavUbuntu:18.04:LTS |
before 0.103.5+dfsg-0ubuntu0.18.04.1, plus listed versions 0.99.2+dfsg-6ubuntu20.99.3~beta1+dfsg-2ubuntu10.99.3~beta1+dfsg-2ubuntu20.99.3+addedllvm-0ubuntu10.99.3+addedllvm-0ubuntu2 Show 14 moreShow less0.99.4+addedllvm-0ubuntu10.100.1+dfsg-1ubuntu0.18.04.10.100.1+dfsg-1ubuntu0.18.04.20.100.1+dfsg-1ubuntu0.18.04.30.100.2+dfsg-1ubuntu0.18.04.10.100.3+dfsg-0ubuntu0.18.04.10.101.4+dfsg-0ubuntu0.18.04.10.102.1+dfsg-0ubuntu0.18.04.20.102.2+dfsg-0ubuntu0.18.04.10.102.3+dfsg-0ubuntu0.18.04.10.102.4+dfsg-0ubuntu0.18.04.10.103.2+dfsg-0ubuntu0.18.04.10.103.2+dfsg-0ubuntu0.18.04.20.103.2+dfsg-0ubuntu0.18.04.3 |
0.103.5+dfsg-0ubuntu0.18.04.1 |
clamavUbuntu:20.04:LTS |
before 0.103.5+dfsg-1~20.04.1, plus listed versions 0.101.4+dfsg-1ubuntu10.102.1+dfsg-1ubuntu10.102.1+dfsg-2ubuntu10.102.1+dfsg-2ubuntu20.102.2+dfsg-1ubuntu1 Show 5 moreShow less0.102.2+dfsg-2ubuntu10.102.3+dfsg-0ubuntu0.20.04.10.102.4+dfsg-0ubuntu0.20.04.10.103.2+dfsg-0ubuntu0.20.04.10.103.2+dfsg-0ubuntu0.20.04.2 |
0.103.5+dfsg-1~20.04.1 |
clamavopenSUSE:Leap 15.3 |
before 0.103.5-3.35.1 | 0.103.5-3.35.1 |
clamavopenSUSE:Tumbleweed |
before 0.103.5-1.1 | 0.103.5-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| affected | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-20698 is a high vulnerability (CVSS 7.5) in Cisco Clamav, published January 13, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.06%, the 87th percentile. Fixed in clamav 0.103.6-r0.
References
blog.clamav.net/2022/01/clamav-01035-and-01042-security-patch.html
security.gentoo.org/glsa/202310-01
nvd.nist.gov/vuln/detail/CVE-2022-20698
github.com/advisories/GHSA-q493-fq52-3qhm
security.alpinelinux.org/vuln/CVE-2022-20698
errata.cloudlinux.com/els6/CLSA-2024-1725385588.html
Show 16 moreShow less
security-tracker.debian.org/tracker/CVE-2022-20698
advisories.mageia.org/MGASA-2022-0024.html
bugs.mageia.org/show_bug.cgi?id=29896
lists.fedoraproject.org/archives/list/[email protected]/thread/CKHVIDDT45SUTNVD3ODK2FDXJFJ3ETJH
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1508
suse.com/support/update/announcement/2022/suse-su-20220160-1
bugzilla.suse.com/1194731
ubuntu.com/security/CVE-2022-20698
cve.org/CVERecord?id=CVE-2022-20698
lists.opensuse.org/archives/list/[email protected]/thread/WCT6DXOWMADGOBQLVFVTQMZKCFCV2BAQ