CVE-2022-20770: cisco cisco amp for endpoints Resource Management Errors
Vulnerability summary
CVE-2022-20770 is a high (CVSS 8.6) Resource Management Errors vulnerability in cisco cisco amp for endpoints. EPSS estimates a 7.07% chance of exploitation in the next 30 days, higher than 94.1% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 7 · Related 5Timeline
- 04-05-2022PublishedVulnerability first disclosed.
- 06-11-2024Last modifiedVulnerability information updated.
Description
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in CHM file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional information becomes available.
CVSS metrics
6 scores · 5 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated8.6HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HDiffers
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
7.07%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
+0.11 pp
From 6.97% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco2 products
- cisco amp for endpointsn/a
- secure_endpoint< 1.16.3 | < 1.17.2 | < 7.5.5 | ≥ 1.18.0, < 1.18.2
Debian2 products
- clamav< 0.103.6+dfsg-1
- debian_linuxEOL9.0
Alpine1 product
- clamav≥ 0.104.0, < 0.103.6-r0
Clamav1 product
- clamav≤ 0.103.5 | ≥ 0.104.0, ≤ 0.104.2
Fedoraproject1 product
- fedoraEOL34 | 35 | 36
Ubuntu1 product
- clamav< 0.103.6+dfsg-0ubuntu0.14.04.1+esm1 | < 0.103.6+dfsg-0ubuntu0.16.04.1+esm1 | < 0.103.6+dfsg-0ubuntu0.18.04.1 | < 0.103.6+dfsg-0ubuntu0.20.04.1 | < 0.103.6+dfsg-0ubuntu0.22.04.1
6 vendors · 8 products
References
14 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-dos-prVGcHLdVendor AdvisoryREPORTThird Party Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
- security.gentoo.org/glsa/202310-01Vendor Advisory
