CVE-2022-20698: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that may result in an invalid pointer read. An attacker could exploit this vulnerability by sending a crafted OOXML file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 20.04 only; version 20.10 only; version 21.04 only
• Clamav Clamav: before 0.103.5 (fixed in 0.103.5); from 0.104.0, before 0.104.2 (fixed in 0.104.2)
• Debian Debian Linux: version 9.0 only; version 10.0 only; version 11.0 only

Published 2022-01-14. Last modified 2026-06-17.