Lucene search
CloudLinuxCLSA-2022:1660762248HistoryAug 17, 2022 - 6:50 p.m.
Fixed 13 CVEs in expat
2022-08-1718:50:48
repo.cloudlinux.com
72
expat
integer overflow
utf-8 sequence
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.05
Percentile
93.0%
- CVE-2022-25236: Fix insertion of namespace-separator characters into
namespace URIs - CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to
arbitrary code execution - CVE-2022-25315: Fix integer overflow in storeRawNames()
- CVE-2022-22822: Fix integer overflow in addBinding()
- CVE-2022-22823: Fix integer overflow in build_model()
- CVE-2022-22824: Fix integer overflow in defineAttribute()
- CVE-2022-22825: Fix integer overflow in lookup()
- CVE-2022-22826: Fix integer overflow in nextScaffoldPart()
- CVE-2022-22827: Fix integer overflow in storeAtts()
- CVE-2022-23852: Fix integer overflow in XML_GetBuffer()
- CVE-2021-46143: Fix integer overflow on m_groupSize in doProlog()
- CVE-2021-45960: Fix troublesome left shifts in storeAtts()
- CVE-2022-23990: Fix integer overflow in doProlog()
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Centos | 6 | x86_64 | expat-devel | < 2.0.1 | expat-2.0.1-13.el6_8.tuxcare.els1.src.rpm |
| Centos | 6 | x86_64 | expat | < 2.0.1 | expat-2.0.1-13.el6_8.tuxcare.els1.src.rpm |
| Centos | 6 | i686 | expat | < 2.0.1 | expat-2.0.1-13.el6_8.tuxcare.els1.src.rpm |
| Centos | 6 | i686 | expat-devel | < 2.0.1 | expat-2.0.1-13.el6_8.tuxcare.els1.src.rpm |
Related
nessus
nessus
NewStart CGSL MAIN 6.02 : expat Multiple Vulnerabilities (NS-SA-2022-0098)
2022-11-15 00:00:00
Rocky Linux 8 : expat (RLSA-2022:0951)
2023-11-06 00:00:00
CentOS 7 : expat (CESA-2022:1069)
2022-03-30 00:00:00
openvas
openvas
CentOS: Security Advisory for expat (CESA-2022:1069)
2022-03-30 00:00:00
Ubuntu: Security Advisory (USN-5288-1)
2022-02-22 00:00:00
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2023-1252)
2023-01-31 00:00:00
redhat
redhat
(RHSA-2022:0951) Important: expat security update
2022-03-16 15:13:06
(RHSA-2022:1069) Important: expat security update
2022-03-28 08:42:24
(RHSA-2022:7692) Moderate: xmlrpc-c security update
2022-11-08 06:26:32
debian
debian
[SECURITY] [DLA 2904-1] expat security update
2022-01-30 21:42:20
[SECURITY] [DSA 5073-1] expat security update
2022-02-12 13:32:08
[SECURITY] [DLA 2935-1] expat security update
2022-03-07 13:35:55
ibm
ibm
osv
osv
Important: expat security update
2022-03-16 00:00:00
expat vulnerabilities
2022-02-21 14:48:40
expat - security update
2022-02-12 00:00:00
cloudfoundry
cloudfoundry
USN-5288-1: Expat vulnerabilities | Cloud Foundry
2022-04-21 00:00:00
oraclelinux
oraclelinux
expat security update
2022-03-16 00:00:00
expat security update
2022-03-28 00:00:00
xmlrpc-c security update
2022-11-15 00:00:00
ubuntu
ubuntu
Expat vulnerabilities
2022-02-21 00:00:00
xmltok library vulnerabilities
2022-07-19 00:00:00
almalinux
almalinux
Important: expat security update
2022-03-16 00:00:00
Moderate: xmlrpc-c security update
2022-11-08 00:00:00
Important: mingw-expat security update
2022-11-08 00:00:00
rocky
rocky
expat security update
2022-03-16 15:13:06
xmlrpc-c security update
2022-11-08 06:26:32
centos
centos
expat security update
2022-03-29 22:31:03
ics
ics
Hitachi Energy AFS65x, AFF66x, AFS67x, and AFR67x Series Products
2023-10-05 12:00:00
slackware
slackware
[slackware-security] expat
2022-01-16 21:48:11
mageia
mageia
Updated expat packages fix security vulnerability
2022-01-25 15:13:11
Updated expat packages fix security vulnerability
2022-02-03 23:29:44
aix
aix
AIX is affected by multiple vulnerabilities in Python
2022-07-28 13:12:18
suse
suse
Security update for expat (important)
2022-01-25 00:00:00
Security update for expat (important)
2022-02-18 00:00:00
hp
hp
Expat Library update for Teradici PCoIP Software and Firmware
2022-04-11 00:00:00
amazon
amazon
Medium: expat
2022-06-30 23:38:00
Medium: expat
2022-07-06 03:09:00
altlinux
altlinux
Security fix for the ALT Linux 9 package expat version 2.4.3-alt1
2022-01-31 00:00:00
gentoo
gentoo
Expat: Multiple Vulnerabilities
2022-09-29 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-0462
2022-01-22 00:00:00
Critical Photon OS Security Update - PHSA-2022-0431
2022-01-23 00:00:00
Critical Photon OS Security Update - PHSA-2022-0353
2022-01-19 00:00:00
f5
f5
ubuntucve
ubuntucve
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.05
Percentile
93.0%
Related for CLSA-2022:1660762248