CVE-2022-20785highCWE-401

CVE-2022-20785: falha de alta gravidade em Cisco AMP for Endpoints

ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cisco AMP for Endpoints+ Monitorar clamav

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 7.1%
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional information becomes available.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Cisco · Cisco AMP for Endpoints
CVEs relacionadas — Cisco AMP for Endpoints

No mesmo produto, das mais perigosas para as menos.

CVE-2022-20770HIGHClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022EPSS 7.1%CVE-2022-20771HIGHClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022EPSS 5.9%CVE-2018-15437MEDIUMCisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service VulnerabilityEPSS 1.0%CVE-2020-3314MEDIUMCisco AMP for Endpoints Mac Connector Software File Scan Denial of Service VulnerabilityEPSS 0.6%CVE-2021-1280HIGHCisco Advanced Malware Protection for Endpoints and Immunet for Windows DLL Hijacking VulnerabilityEPSS 0.5%CVE-2022-20796MEDIUMClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022EPSS 0.4%