This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page.
View CVE-2022-20796 →
ALPINE-CVE-2022-20796
On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulne...
Original description
The description as published by the source.
On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Alpine:v3.12
clamav
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.6-r0"}]}]
Alpine:v3.13
clamav
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.6-r0"}]}]
References
- advisory security.alpinelinux.org