Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 8 MGASA-2022-0024 Moderate: ClamAV Denial Of Service Issue

mageia
Calendar Grey January 18, 2022
Dist Mageia Esm H88
Recent ClamAV updates fix a critical vulnerability linked to OOXML parsing that could lead to denial-of-service attacks.
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote at...

Summary

A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition. (CVE-2022-20698)

References

- https://bugs.mageia.org/show_bug.cgi?id=29896

- https://blog.clamav.net/2022/01/clamav-01035-and-01042-security-patch.html

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/CKHVIDDT45SUTNVD3ODK2FDXJFJ3ETJH/

- https://www.cve.org/CVERecord?id=CVE-2022-20698

Topics%20covered

Topics Covered

security advisory denial of service moderate severity clamav mageia ooxml parsing

Resolution

SRPMS

- 8/core/clamav-0.103.5-1.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 18 Jan 2022
URL: https://advisories.mageia.org/MGASA-2022-0024.html
Type: security
CVE: CVE-2022-20698

Topics%20covered

Topics Covered

security advisory denial of service moderate severity clamav mageia ooxml parsing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here