Expat defineAttribute function buffer overflow vulnerability

2022-01-1400:00:00

China National Vulnerability Database

www.cnvd.org.cn

expat

xml parser

buffer overflow

defineattribute function

version 2.4.3

boundary error

untrusted input

remote attacker

arbitrary code

system security

vulnerability

exploit

EPSS

0.015

Percentile

87.1%

JSON

Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in defineAttribute in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system.

debiancve 1

alpinelinux 1

cvelist 1

nvd 1

redhatcve 1

osv 10

prion 1

cbl_mariner 2

cve 1

veracode 1

nessus 61

ubuntucve 1