CVE-2022-20803 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-20803 Interim 1 9 2026-03-05T04:50:23Z current 2023-02-21T00:21:45Z 2026-03-05T04:50:23Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-20803 A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that may result in a double-free. An attacker could exploit this vulnerability by submitting a crafted OLE2 file to be scanned by ClamAV on the affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 clamav clamav-devel clamav-docs-html clamav-milter libclamav12 libclamav9 libclammspack0 libfreshclam2 libfreshclam3 libfreshclam4 clamav as a component of SUSE CaaS Platform 4.0 clamav-devel as a component of SUSE CaaS Platform 4.0 libclamav9 as a component of SUSE CaaS Platform 4.0 libfreshclam2 as a component of SUSE CaaS Platform 4.0 clamav as a component of SUSE Enterprise Storage 7 clamav as a component of SUSE Enterprise Storage 7.1 clamav-devel as a component of SUSE Enterprise Storage 7.1 clamav-docs-html as a component of SUSE Enterprise Storage 7.1 clamav-milter as a component of SUSE Enterprise Storage 7.1 libclamav12 as a component of SUSE Enterprise Storage 7.1 libclammspack0 as a component of SUSE Enterprise Storage 7.1 libfreshclam3 as a component of SUSE Enterprise Storage 7.1 libfreshclam4 as a component of SUSE Enterprise Storage 7.1 clamav as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 clamav as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS clamav-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libclamav9 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libfreshclam2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS clamav as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS clamav-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libclamav9 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libfreshclam2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS clamav as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS clamav-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libclamav9 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libfreshclam2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS clamav as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS clamav-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS clamav-docs-html as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS clamav-milter as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libclamav12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libclammspack0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfreshclam3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfreshclam4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS clamav as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 clamav-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libclamav9 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libfreshclam2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 clamav as a component of SUSE Linux Enterprise Real Time 15 SP3 clamav-devel as a component of SUSE Linux Enterprise Real Time 15 SP3 libclamav9 as a component of SUSE Linux Enterprise Real Time 15 SP3 libfreshclam2 as a component of SUSE Linux Enterprise Real Time 15 SP3 clamav as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata clamav as a component of SUSE Linux Enterprise Server 12 SP2-BCL clamav as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS clamav as a component of SUSE Linux Enterprise Server 12 SP4-LTSS clamav as a component of SUSE Linux Enterprise Server 12 SP5 clamav as a component of SUSE Linux Enterprise Server 15 SP1-LTSS clamav-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libclamav9 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libfreshclam2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS clamav as a component of SUSE Linux Enterprise Server 15 SP2-LTSS clamav-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libclamav9 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libfreshclam2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS clamav as a component of SUSE Linux Enterprise Server 15 SP3-LTSS clamav-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS clamav-docs-html as a component of SUSE Linux Enterprise Server 15 SP3-LTSS clamav-milter as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libclamav12 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libclammspack0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfreshclam3 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfreshclam4 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS clamav as a component of SUSE Linux Enterprise Server Teradata 12 SP3 clamav as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS clamav as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 clamav as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 clamav as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 clamav-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libclamav9 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libfreshclam2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 clamav as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 clamav-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libclamav9 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libfreshclam2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 clamav as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 clamav-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 clamav-docs-html as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 clamav-milter as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libclamav12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libclammspack0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfreshclam3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfreshclam4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 clamav as a component of SUSE Manager Proxy 4.2 clamav-devel as a component of SUSE Manager Proxy 4.2 libclamav9 as a component of SUSE Manager Proxy 4.2 libfreshclam2 as a component of SUSE Manager Proxy 4.2 clamav as a component of SUSE Manager Retail Branch Server 4.2 clamav-devel as a component of SUSE Manager Retail Branch Server 4.2 libclamav9 as a component of SUSE Manager Retail Branch Server 4.2 libfreshclam2 as a component of SUSE Manager Retail Branch Server 4.2 clamav as a component of SUSE Manager Server 4.2 clamav-devel as a component of SUSE Manager Server 4.2 libclamav9 as a component of SUSE Manager Server 4.2 libfreshclam2 as a component of SUSE Manager Server 4.2 clamav as a component of SUSE OpenStack Cloud 9 clamav as a component of SUSE OpenStack Cloud Crowbar 9 A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that may result in a double-free. An attacker could exploit this vulnerability by submitting a crafted OLE2 file to be scanned by ClamAV on the affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition. CVE-2022-20803 SUSE CaaS Platform 4.0:clamav SUSE CaaS Platform 4.0:clamav-devel SUSE CaaS Platform 4.0:libclamav9 SUSE CaaS Platform 4.0:libfreshclam2 SUSE Enterprise Storage 7.1:clamav SUSE Enterprise Storage 7.1:clamav-devel SUSE Enterprise Storage 7.1:clamav-docs-html SUSE Enterprise Storage 7.1:clamav-milter SUSE Enterprise Storage 7.1:libclamav12 SUSE Enterprise Storage 7.1:libclammspack0 SUSE Enterprise Storage 7.1:libfreshclam3 SUSE Enterprise Storage 7.1:libfreshclam4 SUSE Enterprise Storage 7:clamav SUSE Linux Enterprise High Performance Computing 12 SP5:clamav SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:clamav SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:clamav-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libclamav9 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libfreshclam2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:clamav SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:clamav-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libclamav9 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libfreshclam2 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:clamav SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:clamav-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libclamav9 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libfreshclam2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:clamav SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:clamav-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:clamav-docs-html SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:clamav-milter SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libclamav12 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libclammspack0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfreshclam3 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libfreshclam4 SUSE Linux Enterprise Module for Basesystem 15 SP4:clamav SUSE Linux Enterprise Module for Basesystem 15 SP4:clamav-devel SUSE Linux Enterprise Module for Basesystem 15 SP4:libclamav9 SUSE Linux Enterprise Module for Basesystem 15 SP4:libfreshclam2 SUSE Linux Enterprise Real Time 15 SP3:clamav SUSE Linux Enterprise Real Time 15 SP3:clamav-devel SUSE Linux Enterprise Real Time 15 SP3:libclamav9 SUSE Linux Enterprise Real Time 15 SP3:libfreshclam2 SUSE Linux Enterprise Server 11 SP3 for Teradata:clamav SUSE Linux Enterprise Server 12 SP2-BCL:clamav SUSE Linux Enterprise Server 12 SP4-ESPOS:clamav SUSE Linux Enterprise Server 12 SP4-LTSS:clamav SUSE Linux Enterprise Server 12 SP5:clamav SUSE Linux Enterprise Server 15 SP1-LTSS:clamav SUSE Linux Enterprise Server 15 SP1-LTSS:clamav-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libclamav9 SUSE Linux Enterprise Server 15 SP1-LTSS:libfreshclam2 SUSE Linux Enterprise Server 15 SP2-LTSS:clamav SUSE Linux Enterprise Server 15 SP2-LTSS:clamav-devel SUSE Linux Enterprise Server 15 SP2-LTSS:libclamav9 SUSE Linux Enterprise Server 15 SP2-LTSS:libfreshclam2 SUSE Linux Enterprise Server 15 SP3-LTSS:clamav SUSE Linux Enterprise Server 15 SP3-LTSS:clamav-devel SUSE Linux Enterprise Server 15 SP3-LTSS:clamav-docs-html SUSE Linux Enterprise Server 15 SP3-LTSS:clamav-milter SUSE Linux Enterprise Server 15 SP3-LTSS:libclamav12 SUSE Linux Enterprise Server 15 SP3-LTSS:libclammspack0 SUSE Linux Enterprise Server 15 SP3-LTSS:libfreshclam3 SUSE Linux Enterprise Server 15 SP3-LTSS:libfreshclam4 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:clamav SUSE Linux Enterprise Server Teradata 12 SP3:clamav SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav SUSE Linux Enterprise Server for SAP Applications 12 SP5:clamav SUSE Linux Enterprise Server for SAP Applications 15 SP1:clamav SUSE Linux Enterprise Server for SAP Applications 15 SP1:clamav-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:libclamav9 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libfreshclam2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:clamav SUSE Linux Enterprise Server for SAP Applications 15 SP2:clamav-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:libclamav9 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libfreshclam2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:clamav SUSE Linux Enterprise Server for SAP Applications 15 SP3:clamav-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:clamav-docs-html SUSE Linux Enterprise Server for SAP Applications 15 SP3:clamav-milter SUSE Linux Enterprise Server for SAP Applications 15 SP3:libclamav12 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libclammspack0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfreshclam3 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libfreshclam4 SUSE Manager Proxy 4.2:clamav SUSE Manager Proxy 4.2:clamav-devel SUSE Manager Proxy 4.2:libclamav9 SUSE Manager Proxy 4.2:libfreshclam2 SUSE Manager Retail Branch Server 4.2:clamav SUSE Manager Retail Branch Server 4.2:clamav-devel SUSE Manager Retail Branch Server 4.2:libclamav9 SUSE Manager Retail Branch Server 4.2:libfreshclam2 SUSE Manager Server 4.2:clamav SUSE Manager Server 4.2:clamav-devel SUSE Manager Server 4.2:libclamav9 SUSE Manager Server 4.2:libfreshclam2 SUSE OpenStack Cloud 9:clamav SUSE OpenStack Cloud Crowbar 9:clamav important 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H