CVE-2022-20803 ClamAV Double-free Vulnerability in the OLE2 File Parser
An unauthenticated remote attacker can cause a denial of service by submitting a crafted OLE2 file that triggers a double-free crash in ClamAV.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-20803?
CVE-2022-20803 is a high-severity use after free vulnerability in Clamav Clamav, published on 17 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that may result in a double-free. An attacker could exploit this vulnerability by submitting a crafted OLE2 file to be scanned by ClamAV on the affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
Weakness: CWE-415
Which versions are affected by CVE-2022-20803?
It affects 1 product.
Products include Clamav Clamav.
How do I fix CVE-2022-20803?
No fix has been published for CVE-2022-20803 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2022-20803 being exploited?
There is no known exploitation of CVE-2022-20803 in the wild and no public exploit code.
Other vulnerabilities in Clamav Clamav
Sources
Also known as GHSA-rv4r-hqph-p3cp.