Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-20796

Опубликовано: 04 мая 2022
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.9
CVSS3: 6.5

Описание

On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog.

РелизСтатусПримечание
bionic

released

0.103.6+dfsg-0ubuntu0.18.04.1
devel

released

0.103.6+dfsg-1ubuntu1
esm-infra-legacy/trusty

not-affected

0.103.6+dfsg-0ubuntu0.14.04.1+esm1
esm-infra/bionic

not-affected

0.103.6+dfsg-0ubuntu0.18.04.1
esm-infra/focal

not-affected

0.103.6+dfsg-0ubuntu0.20.04.1
esm-infra/xenial

released

0.103.6+dfsg-0ubuntu0.16.04.1+esm1
focal

released

0.103.6+dfsg-0ubuntu0.20.04.1
impish

released

0.103.6+dfsg-0ubuntu0.21.10.1
jammy

released

0.103.6+dfsg-0ubuntu0.22.04.1
kinetic

released

0.103.6+dfsg-1ubuntu1

Показывать по

EPSS

Процентиль: 5%
0.00025
Низкий

4.9 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
около 3 лет назад

On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog.

CVSS3: 5.5
msrc
около 3 лет назад

Описание отсутствует

CVSS3: 6.5
debian
около 3 лет назад

On May 4, 2022, the following vulnerability in the ClamAV scanning lib ...

CVSS3: 5.5
github
около 3 лет назад

On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog.

CVSS3: 6.5
fstec
больше 3 лет назад

Уязвимость библиотеки сканирования пакета антивирусных программ ClamAV и средства защиты от вредоносного программного обеспечения Cisco AMP для конечных устройств, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 5%
0.00025
Низкий

4.9 Medium

CVSS2

6.5 Medium

CVSS3