CVE:CVE-2022-20796
CNNVD:CNNVD-202205-2060
ClamAV（Clam AntiVirus）是ClamAV团队的一套免费且开源的杀毒软件。该软件用于检测木马、病毒、恶意软件和其他恶意威胁。
ClamAV 0.104.1版本到0.104.2版本 0.103.4版本到0.103.5版本存在代码问题漏洞，该漏洞源于扫描判定缓存检查中的 NULL 指针取消引用错误。远程攻击者可以将特制数据传递给应用程序利用该漏洞执行拒绝服务 (DoS) 攻击。
solution:Upgrade clamav clamav to a higher version than 0.103.4,0.103.5,0.104.1,0.104.2,and avoid the version 0.103.4,0.103.5,0.104.1,0.104.2; Upgrade cisco secure_endpoint to a higher version than 1.16.3,1.17.2,7.5.5,1.18.2,and avoid the version (,1.16.3),(,1.17.2),(,7.5.5),[1.18.0,1.18.2); Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0