CVE:CVE-2022-20698
CNNVD:CNNVD-202201-1076
ClamAV（Clam AntiVirus）是ClamAV团队的一套免费且开源的杀毒软件。该软件用于检测木马、病毒、恶意软件和其他恶意威胁。
ClamAV 存在缓冲区错误漏洞，该漏洞源于libjson-c / CL_SCAN_GENERAL_COLLECT_METADATA中存在处理异常，攻击者可以利用该漏洞实现拒绝服务攻击。
solution:Upgrade clamav clamav to a higher version than 0.103.5,0.104.2,and avoid the version (,0.103.5),[0.104.0,0.104.2); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,20.10,21.04,and avoid the version 14.04,16.04,18.04,20.04,20.10,21.04