HOMEVULNERABILITIESCVE-2022-20796
MEDIUM

CVE-2022-20796

CWE-822Published: May 4, 2022· Updated: Jun 17, 2026

5.5
CVSS v3.1

Official Description

On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog.

NVD Source

Technical Analysis

CVE-2022-20796 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 5.5.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges Req.Low
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Vendors & Products

Cisco1 product(s)
secure endpoint
clamav1 product(s)
clamav
Debian1 product(s)
debian linux
Fedora1 product(s)
fedora
Source: NVD CPE · 9 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttps://lists.debian.org/debian-lts-announce/2022/06/msg00004.html
ADVISORYhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-dos-vL9x58p4
ADVISORYhttps://lists.debian.org/debian-lts-announce/2022/06/msg00004.html
ADVISORYhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-dos-vL9x58p4

All References (12)

→
https://lists.debian.org/debian-lts-announce/2022/06/msg00004.htmlMailing List · Third Party Advisory
→
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RV6BLIATIJE74SQ6NG5ZC4JK5MMDQ2R/
→
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BX5ZXNHP4NFYQ5BFSKY3WT7NTBZUYG7L/
→
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4NNBIJVG6Z4PDIKUZXTYXICYUAYAZ56/
→
https://security.gentoo.org/glsa/202310-01
→
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-dos-vL9x58p4Third Party Advisory
→
https://lists.debian.org/debian-lts-announce/2022/06/msg00004.htmlMailing List · Third Party Advisory
→
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RV6BLIATIJE74SQ6NG5ZC4JK5MMDQ2R/
→
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BX5ZXNHP4NFYQ5BFSKY3WT7NTBZUYG7L/
→
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4NNBIJVG6Z4PDIKUZXTYXICYUAYAZ56/
→
https://security.gentoo.org/glsa/202310-01
→
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-dos-vL9x58p4Third Party Advisory

Quick Facts

CVE IDCVE-2022-20796
CVSS Score5.5 / 10
SeverityMEDIUM
WeaknessCWE-822
CISA KEVNo
Affected4 vendor(s)
PublishedMay 4, 2022

Related CVEs (CWE-822)

CVE-2018-12548
9.8
CVE-2018-7497
9.8
CVE-2023-43518
9.8
CVE-2026-48137
9.8
CVE-2025-50165
9.8
CVE-2018-14811
9.8

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2022-20796 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2022-20796·NVD