{"id":"CVE-2022-20698","aliases":["ALPINE-CVE-2022-20698","AZL-7532","CLSA-2024-1725385588","DEBIAN-CVE-2022-20698","EUVD-2022-25948","GHSA-q493-fq52-3qhm","MGASA-2022-0024","OESA-2022-1508","SUSE-SU-2022:0160-1","SUSE-SU-2022:0358-1","SUSE-SU-2022:0493-1","SUSE-SU-2022:14882-1","UBUNTU-CVE-2022-20698","USN-5233-1","USN-5233-2","openSUSE-SU-2022:0493-1","openSUSE-SU-2024:11748-1"],"status":"published","title":"Clam AntiVirus (ClamAV) Denial of Service Vulnerability","description":"A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0329,"percentile":0.88572,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125","CWE-20"],"published":"2022-01-13T00:00:00Z","modified":"2026-11-03T08:02:04Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"clamav","fixed_in":["0.103.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"clamav","fixed_in":["0.103.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"clamav","fixed_in":["0.104.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"clamav","fixed_in":["0.104.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"clamav","fixed_in":["0.104.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"clamav","fixed_in":["0.104.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"clamav","fixed_in":["0.104.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"clamav","fixed_in":["0.104.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"clamav","fixed_in":["0.104.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"clamav","fixed_in":["0.104.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"clamav","fixed_in":["0.104.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"clamav","fixed_in":["0.104.2-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"clamav","fixed_in":["0.104.2-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"clamav","fixed_in":["0.103.5+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"clamav","fixed_in":["0.103.5+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"clamav","fixed_in":["0.103.5+dfsg-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"clamav","fixed_in":["0.103.5-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"clamav","fixed_in":["0.103.2-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"clamav","fixed_in":["0.103.2-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"clamav","fixed_in":["0.103.2-5.oe1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"clamav","fixed_in":["0.103.5-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"clamav","fixed_in":["0.103.5-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"clamav","fixed_in":["0.103.5-33.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"clamav","fixed_in":["0.103.5-33.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"clamav","fixed_in":["0.103.5-33.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"clamav","fixed_in":["0.103.5-33.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"clamav","fixed_in":["0.103.5-33.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"clamav","fixed_in":["0.103.5-33.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"clamav","fixed_in":["0.103.5-33.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"clamav","fixed_in":["0.103.5-33.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"clamav","fixed_in":["0.103.5-33.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"clamav","fixed_in":["0.103.5-33.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"clamav","fixed_in":["0.103.5-33.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"clamav-openssl1","fixed_in":["0.103.5-0.20.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"clamav","fixed_in":["0.103.5-0.20.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"clamav","fixed_in":["0.103.5-0.20.44.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"clamav","fixed_in":["0.103.5+dfsg-0ubuntu0.14.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"clamav","fixed_in":["0.103.5+dfsg-0ubuntu0.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"clamav","fixed_in":["0.103.5+dfsg-0ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"clamav","fixed_in":["0.103.5+dfsg-1~20.04.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"clamav","fixed_in":["0.103.5-3.35.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"clamav","fixed_in":["0.103.5-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.104.0"},{"fixed":"0.103.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.104.0"},{"fixed":"0.103.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.104.0"},{"fixed":"0.104.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.104.0"},{"fixed":"0.104.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.104.0"},{"fixed":"0.104.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.104.0"},{"fixed":"0.104.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.104.0"},{"fixed":"0.104.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.104.0"},{"fixed":"0.104.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.104.0"},{"fixed":"0.104.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.104.0"},{"fixed":"0.104.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.104.0"},{"fixed":"0.104.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.104.0"},{"fixed":"0.104.2-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.104.2-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"clamav-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"clamav-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"clamav-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"clamav-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"clamav-milter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"clamav-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"clamd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.11-1.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5+dfsg-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.2-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.2-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.2-5.oe1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-33.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-33.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-33.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-33.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-33.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-33.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-33.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-33.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-33.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-33.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-33.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"clamav-openssl1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-0.20.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-0.20.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-0.20.44.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5+dfsg-0ubuntu0.14.04.1+esm1"}]}],"versions":["0.97.8+dfsg-1ubuntu4","0.97.8+dfsg-1ubuntu5","0.98.1+dfsg-1ubuntu4","0.98.1+dfsg-1ubuntu5","0.98.1+dfsg-2ubuntu2","0.98.1+dfsg-4ubuntu1","0.98.1+dfsg-4ubuntu1.1","0.98.5+addedllvm-0ubuntu0.14.04.1","0.98.6+dfsg-0ubuntu0.14.04.1","0.98.7+dfsg-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.2","0.99.3+addedllvm-0ubuntu0.14.04.1","0.99.4+addedllvm-0ubuntu0.14.04.1","0.100.1+dfsg-1ubuntu0.14.04.1","0.100.1+dfsg-1ubuntu0.14.04.2","0.100.1+dfsg-1ubuntu0.14.04.3","0.100.1+dfsg-1ubuntu0.14.04.4","0.100.2+dfsg-1ubuntu0.14.04.1","0.100.2+dfsg-1ubuntu0.14.04.2","0.100.3+dfsg-0ubuntu0.14.04.1","0.100.3+dfsg-0ubuntu0.14.04.1+esm1","0.101.4+dfsg-0ubuntu0.14.04.1+esm1","0.102.1+dfsg-0ubuntu0.14.04.1+esm1","0.102.2+dfsg-0ubuntu0.14.04.1+esm1","0.102.3+dfsg-0ubuntu0.14.04.1+esm1","0.102.4+dfsg-0ubuntu0.14.04.1+esm1","0.103.2+dfsg-0ubuntu0.14.04.1+esm1","0.103.2+dfsg-0ubuntu0.14.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5+dfsg-0ubuntu0.16.04.1+esm1"}]}],"versions":["0.98.7+dfsg-0ubuntu4","0.98.7+dfsg-0ubuntu5","0.99+dfsg-1ubuntu1","0.99+dfsg-1ubuntu1.1","0.99+dfsg-1ubuntu1.2","0.99.2+dfsg-0ubuntu0.16.04.1","0.99.2+dfsg-0ubuntu0.16.04.2","0.99.2+dfsg-0ubuntu0.16.04.3","0.99.3+addedllvm-0ubuntu0.16.04.1","0.99.4+addedllvm-0ubuntu0.16.04.1","0.100.1+dfsg-1ubuntu0.16.04.1","0.100.1+dfsg-1ubuntu0.16.04.2","0.100.1+dfsg-1ubuntu0.16.04.3","0.100.2+dfsg-1ubuntu0.16.04.1","0.100.3+dfsg-0ubuntu0.16.04.1","0.101.4+dfsg-0ubuntu0.16.04.1","0.102.1+dfsg-0ubuntu0.16.04.2","0.102.2+dfsg-0ubuntu0.16.04.1","0.102.3+dfsg-0ubuntu0.16.04.1","0.102.4+dfsg-0ubuntu0.16.04.1","0.103.2+dfsg-0ubuntu0.16.04.1","0.103.2+dfsg-0ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5+dfsg-0ubuntu0.18.04.1"}]}],"versions":["0.99.2+dfsg-6ubuntu2","0.99.3~beta1+dfsg-2ubuntu1","0.99.3~beta1+dfsg-2ubuntu2","0.99.3+addedllvm-0ubuntu1","0.99.3+addedllvm-0ubuntu2","0.99.4+addedllvm-0ubuntu1","0.100.1+dfsg-1ubuntu0.18.04.1","0.100.1+dfsg-1ubuntu0.18.04.2","0.100.1+dfsg-1ubuntu0.18.04.3","0.100.2+dfsg-1ubuntu0.18.04.1","0.100.3+dfsg-0ubuntu0.18.04.1","0.101.4+dfsg-0ubuntu0.18.04.1","0.102.1+dfsg-0ubuntu0.18.04.2","0.102.2+dfsg-0ubuntu0.18.04.1","0.102.3+dfsg-0ubuntu0.18.04.1","0.102.4+dfsg-0ubuntu0.18.04.1","0.103.2+dfsg-0ubuntu0.18.04.1","0.103.2+dfsg-0ubuntu0.18.04.2","0.103.2+dfsg-0ubuntu0.18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5+dfsg-1~20.04.1"}]}],"versions":["0.101.4+dfsg-1ubuntu1","0.102.1+dfsg-1ubuntu1","0.102.1+dfsg-2ubuntu1","0.102.1+dfsg-2ubuntu2","0.102.2+dfsg-1ubuntu1","0.102.2+dfsg-2ubuntu1","0.102.3+dfsg-0ubuntu0.20.04.1","0.102.4+dfsg-0ubuntu0.20.04.1","0.103.2+dfsg-0ubuntu0.20.04.1","0.103.2+dfsg-0ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5+dfsg-0ubuntu0.18.04.1"}]}],"versions":["0.99.2+dfsg-6ubuntu2","0.99.3~beta1+dfsg-2ubuntu1","0.99.3~beta1+dfsg-2ubuntu2","0.99.3+addedllvm-0ubuntu1","0.99.3+addedllvm-0ubuntu2","0.99.4+addedllvm-0ubuntu1","0.100.1+dfsg-1ubuntu0.18.04.1","0.100.1+dfsg-1ubuntu0.18.04.2","0.100.1+dfsg-1ubuntu0.18.04.3","0.100.2+dfsg-1ubuntu0.18.04.1","0.100.3+dfsg-0ubuntu0.18.04.1","0.101.4+dfsg-0ubuntu0.18.04.1","0.102.1+dfsg-0ubuntu0.18.04.2","0.102.2+dfsg-0ubuntu0.18.04.1","0.102.3+dfsg-0ubuntu0.18.04.1","0.102.4+dfsg-0ubuntu0.18.04.1","0.103.2+dfsg-0ubuntu0.18.04.1","0.103.2+dfsg-0ubuntu0.18.04.2","0.103.2+dfsg-0ubuntu0.18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5+dfsg-1~20.04.1"}]}],"versions":["0.101.4+dfsg-1ubuntu1","0.102.1+dfsg-1ubuntu1","0.102.1+dfsg-2ubuntu1","0.102.1+dfsg-2ubuntu2","0.102.2+dfsg-1ubuntu1","0.102.2+dfsg-2ubuntu1","0.102.3+dfsg-0ubuntu0.20.04.1","0.102.4+dfsg-0ubuntu0.20.04.1","0.103.2+dfsg-0ubuntu0.20.04.1","0.103.2+dfsg-0ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5+dfsg-0ubuntu0.14.04.1+esm1"}]}],"versions":["0.97.8+dfsg-1ubuntu4","0.97.8+dfsg-1ubuntu5","0.98.1+dfsg-1ubuntu4","0.98.1+dfsg-1ubuntu5","0.98.1+dfsg-2ubuntu2","0.98.1+dfsg-4ubuntu1","0.98.1+dfsg-4ubuntu1.1","0.98.5+addedllvm-0ubuntu0.14.04.1","0.98.6+dfsg-0ubuntu0.14.04.1","0.98.7+dfsg-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.2","0.99.3+addedllvm-0ubuntu0.14.04.1","0.99.4+addedllvm-0ubuntu0.14.04.1","0.100.1+dfsg-1ubuntu0.14.04.1","0.100.1+dfsg-1ubuntu0.14.04.2","0.100.1+dfsg-1ubuntu0.14.04.3","0.100.1+dfsg-1ubuntu0.14.04.4","0.100.2+dfsg-1ubuntu0.14.04.1","0.100.2+dfsg-1ubuntu0.14.04.2","0.100.3+dfsg-0ubuntu0.14.04.1","0.100.3+dfsg-0ubuntu0.14.04.1+esm1","0.101.4+dfsg-0ubuntu0.14.04.1+esm1","0.102.1+dfsg-0ubuntu0.14.04.1+esm1","0.102.2+dfsg-0ubuntu0.14.04.1+esm1","0.102.3+dfsg-0ubuntu0.14.04.1+esm1","0.102.4+dfsg-0ubuntu0.14.04.1+esm1","0.103.2+dfsg-0ubuntu0.14.04.1+esm1","0.103.2+dfsg-0ubuntu0.14.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5+dfsg-0ubuntu0.16.04.1+esm1"}]}],"versions":["0.98.7+dfsg-0ubuntu4","0.98.7+dfsg-0ubuntu5","0.99+dfsg-1ubuntu1","0.99+dfsg-1ubuntu1.1","0.99+dfsg-1ubuntu1.2","0.99.2+dfsg-0ubuntu0.16.04.1","0.99.2+dfsg-0ubuntu0.16.04.2","0.99.2+dfsg-0ubuntu0.16.04.3","0.99.3+addedllvm-0ubuntu0.16.04.1","0.99.4+addedllvm-0ubuntu0.16.04.1","0.100.1+dfsg-1ubuntu0.16.04.1","0.100.1+dfsg-1ubuntu0.16.04.2","0.100.1+dfsg-1ubuntu0.16.04.3","0.100.2+dfsg-1ubuntu0.16.04.1","0.100.3+dfsg-0ubuntu0.16.04.1","0.101.4+dfsg-0ubuntu0.16.04.1","0.102.1+dfsg-0ubuntu0.16.04.2","0.102.2+dfsg-0ubuntu0.16.04.1","0.102.3+dfsg-0ubuntu0.16.04.1","0.102.4+dfsg-0ubuntu0.16.04.1","0.103.2+dfsg-0ubuntu0.16.04.1","0.103.2+dfsg-0ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-3.35.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.5-1.1"}]}]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"cisco","product":"clamav"},{"vendor":"clamav","product":"clamav"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://blog.clamav.net/2022/01/clamav-01035-and-01042-security-patch.html","tags":["vendor-advisory","x_transferred","Exploit","Vendor Advisory","evidence","web","report"]},{"url":"https://security.gentoo.org/glsa/202310-01","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-20698","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-q493-fq52-3qhm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-20698","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2024-1725385588.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-20698","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0024.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29896","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/CKHVIDDT45SUTNVD3ODK2FDXJFJ3ETJH/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1508","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220160-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194731","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-20698","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220358-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220493-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214882-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-20698","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5233-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5233-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-20698","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WCT6DXOWMADGOBQLVFVTQMZKCFCV2BAQ/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-20698","title":"Clam AntiVirus (ClamAV) Denial of Service Vulnerability","description":"A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.","status":"published","published":"2022-01-14T05:15:11.361Z","modified":"2024-11-06T16:32:32.016Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:34:24.627322Z"}],"euvd":[{"id":"EUVD-2022-25948","description":"A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.","status":"published","published":"2022-01-14T05:15:11Z","modified":"2024-11-06T16:32:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:05:09.633391Z"}],"ghsa":[{"id":"GHSA-q493-fq52-3qhm","title":"A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1...","description":"A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.","status":"published","published":"2022-01-15T00:01:53Z","modified":"2023-10-01T12:30:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20","CWE-125"],"updated_at":"2026-11-02T14:54:46.99514Z"}],"nvd":[{"id":"CVE-2022-20698","description":"A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.","status":"published","published":"2022-01-14T06:15:09.57Z","modified":"2026-06-17T04:24:53.08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20","CWE-125"],"updated_at":"2026-11-02T14:07:10.836864Z"}],"osv":[{"id":"ALPINE-CVE-2022-20698","description":"A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.","status":"published","published":"2022-01-14T06:15:09.57Z","modified":"2026-11-03T07:31:10.354276345Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"AZL-7532","title":"CVE-2022-20698 affecting package clamav for versions less than 0.104.2-1","description":"A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.","status":"published","published":"2022-01-14T06:15:09Z","modified":"2026-04-21T04:38:54.094499Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:09.474476Z"},{"id":"CVE-2022-20698","description":"A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.","status":"published","published":"2022-01-14T06:15:09.57Z","modified":"2026-10-24T10:30:59.388534316Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:23.655778Z"},{"id":"DEBIAN-CVE-2022-20698","description":"A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.","status":"published","published":"2022-01-14T06:15:09.57Z","modified":"2026-11-03T08:02:04.084719527Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"OESA-2022-1508","title":"clamav security update","description":"End-user tools for the Clam Antivirus scanner.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.(CVE-2022-20698)","status":"published","published":"2022-01-28T11:04:47Z","modified":"2026-08-18T01:16:18.614229559Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2022-20698","description":"A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.","status":"published","published":"2022-01-13T00:00:00Z","modified":"2026-04-22T13:14:14.232676Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:52.391598Z"},{"id":"CLSA-2024-1725385588","title":"clamav: Fix of 2 CVEs","description":"- Update to 0.103.11\n- CVE-2023-20032: fix missing buffer size check that may result\n  in a heap buffer overflow write\n- Don't apply clamav-check.patch and CVE-2022-20698.patch as they have already\n  been applied in new 0.103.11 version\n- Don't apply clamav-clamonacc-service.patch since el6 doesn't have systemd\n  and service file is useless","status":"published","published":"2024-09-03T17:50:17Z","modified":"2026-10-21T10:47:45.333413064Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"MGASA-2022-0024","title":"Updated clamav packages fix security vulnerability","description":"A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV)\nSoftware version 0.104.1 and LTS version 0.103.4 and prior versions could\nallow an unauthenticated, remote attacker to cause a denial of service\ncondition on an affected device. The vulnerability is due to improper\nchecks that may result in an invalid pointer read. An attacker could\nexploit this vulnerability by sending a crafted OOXML file to an affected\ndevice. An exploit could allow the attacker to cause the ClamAV scanning\nprocess to crash, resulting in a denial of service condition.\n(CVE-2022-20698)\n","status":"published","published":"2022-01-18T19:29:46Z","modified":"2026-04-16T04:44:13.374062432Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2022:0493-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)\n","status":"published","published":"2022-02-18T09:37:08Z","modified":"2026-02-04T02:26:01.83888Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11748-1","title":"clamav-0.103.5-1.1 on GA media","description":"These are all security issues fixed in the clamav-0.103.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:53:24.912397Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2022:0160-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)\n","status":"published","published":"2022-01-24T10:47:05Z","modified":"2026-02-04T04:41:06.289666Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0358-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)\n","status":"published","published":"2022-02-09T14:50:08Z","modified":"2026-02-04T03:50:03.369902Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0493-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)\n","status":"published","published":"2022-02-18T09:38:13Z","modified":"2026-02-04T02:42:35.607393Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:14882-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)\n","status":"published","published":"2022-01-26T15:53:34Z","modified":"2026-02-04T02:44:35.449382Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5233-1","title":"clamav vulnerability","description":"It was discovered that ClamAV incorrectly handled memory when the\nCL_SCAN_GENERAL_COLLECT_METADATA scan option was enabled. A remote attacker\ncould possibly use this issue to cause ClamAV to crash, resulting in a\ndenial of service.\n","status":"published","published":"2022-01-18T12:24:28Z","modified":"2026-04-22T10:19:48.447695Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5233-2","title":"clamav vulnerability","description":"USN-5233-1 fixed a vulnerability in ClamAV. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that ClamAV incorrectly handled memory when the\n CL_SCAN_GENERAL_COLLECT_METADATA scan option was enabled. A remote attacker\n could possibly use this issue to cause ClamAV to crash, resulting in a\n denial of service.\n","status":"published","published":"2022-01-19T12:42:55Z","modified":"2026-06-29T13:48:36.054269059Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}