Vulnerabilities > CVE-2022-20796 - NULL Pointer Dereference vulnerability in multiple products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

NVD

Published: 2022-05-04

Updated: 2024-11-21

Summary

On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog.

Vulnerable Configurations

Part	Description	Count
Application	Clamav Clamav Clamav 0.103.4 Clamav Clamav 0.103.5 Clamav Clamav 0.104.1 Clamav Clamav 0.104.2	4
Application	Cisco Cisco Secure Endpoint - Cisco Secure Endpoint 6.0.7 Cisco Secure Endpoint 6.0.9 Cisco Secure Endpoint 6.1.5 Cisco Secure Endpoint 6.1.7 Cisco Secure Endpoint 6.1.9 Cisco Secure Endpoint 6.2.1 Cisco Secure Endpoint 6.2.3 Cisco Secure Endpoint 6.2.5 Cisco Secure Endpoint 6.2.9 Cisco Secure Endpoint 6.2.19 Cisco Secure Endpoint 6.3.1 Cisco Secure Endpoint 6.3.3 Cisco Secure Endpoint 6.3.5 Cisco Secure Endpoint 6.3.7 Cisco Secure Endpoint 7.0.5 Cisco Secure Endpoint 7.1.1 Cisco Secure Endpoint 7.1.5 Cisco Secure Endpoint 7.2.3 Cisco Secure Endpoint 7.2.5 Cisco Secure Endpoint 7.2.7 Cisco Secure Endpoint 7.2.11 Cisco Secure Endpoint 7.2.13 Cisco Secure Endpoint 7.3.1 Cisco Secure Endpoint 7.3.3 Cisco Secure Endpoint 7.3.5 Cisco Secure Endpoint 7.3.9 Cisco Secure Endpoint 1.18.0 Cisco Secure Endpoint 1.18.1	33
OS	Fedoraproject Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36	3
OS	Debian Debian Debian Linux 9.0	1

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References