Lucene search
F5F5:K19473898HistoryApr 30, 2022 - 12:00 a.m.
K19473898 : Expat vulnerabilities CVE-2022-23852, CVE-2022-25235, CVE-2022-25236, and CVE-2022-25315
2022-04-3000:00:00
my.f5.com
72
Security Advisory Description
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
Impact
A remote attacker could send specially crafted XML which, when parsed by an application using the Expat library, would result in a buffer over-read and cause the application to stop responding.
Related
nessus
nessus
F5 Networks BIG-IP : Expat vulnerabilities (K19473898)
2022-04-30 00:00:00
Oracle Linux 6 : expat (ELSA-2022-9359)
2022-05-06 00:00:00
Debian DLA-2935-1 : expat - LTS security update
2022-03-07 00:00:00
debian
debian
[SECURITY] [DLA 2935-1] expat security update
2022-03-07 13:35:55
[SECURITY] [DSA 5085-1] expat security update
2022-02-22 20:17:14
openvas
openvas
Fedora: Security Advisory for thunderbird (FEDORA-2022-f202d1a045)
2022-03-23 00:00:00
Fedora: Security Advisory for thunderbird (FEDORA-2022-01f0553b59)
2022-03-23 00:00:00
Fedora: Security Advisory for thunderbird (FEDORA-2023-97a977a96a)
2023-02-03 00:00:00
redhat
redhat
(RHSA-2022:1068) Important: expat security update
2022-03-28 08:40:33
(RHSA-2022:1309) Important: expat security update
2022-04-11 15:03:41
(RHSA-2022:1012) Important: expat security update
2022-03-22 15:14:32
oraclelinux
oraclelinux
expat security update
2022-05-06 00:00:00
expat security update
2022-03-28 00:00:00
expat security update
2022-03-16 00:00:00
osv
osv
expat - security update
2022-03-07 00:00:00
expat - security update
2022-02-22 00:00:00
Important: mingw-expat security update
2022-11-08 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in Expat component shipped with IBM Rational ClearCase ( CVE-2022-23852, CVE-2022-23990, CVE-2022-25235, CVE-2022-25315 )
2022-07-25 14:50:44
fedora
fedora
[SECURITY] Fedora 36 Update: thunderbird-102.7.1-2.fc36
2023-02-03 01:42:19
[SECURITY] Fedora 35 Update: thunderbird-91.7.0-1.fc35
2022-03-17 15:49:04
[SECURITY] Fedora 34 Update: thunderbird-91.7.0-1.fc34
2022-03-18 19:15:01
amazon
amazon
Critical: expat
2022-03-09 22:48:00
Critical: expat
2022-03-09 22:13:00
Important: expat
2022-03-07 23:17:00
mageia
mageia
Updated expat packages fix security vulnerability
2022-02-22 23:15:16
Updated xmlrpc-c packages fix security vulnerability
2022-05-15 13:06:40
suse
suse
Security update for expat (important)
2022-07-06 00:00:00
Security update for expat (important)
2022-03-04 00:00:00
slackware
slackware
[slackware-security] expat
2022-02-20 05:16:42
[slackware-security] expat
2022-01-25 06:35:43
redos
redos
ROS-20220225-01
2022-02-25 00:00:00
almalinux
almalinux
Important: mingw-expat security update
2022-11-08 00:00:00
Important: expat security update
2022-03-16 00:00:00
Important: xmlrpc-c security update
2022-04-28 14:07:17
photon
photon
Critical Photon OS Security Update - PHSA-2022-0157
2022-02-21 00:00:00
Critical Photon OS Security Update - PHSA-2022-0475
2022-02-25 00:00:00
Critical Photon OS Security Update - PHSA-2022-0444
2022-02-25 00:00:00
ubuntu
ubuntu
Expat vulnerabilities and regression
2022-03-10 00:00:00
cloudfoundry
cloudfoundry
USN-5320-1: Expat vulnerabilities and regression | Cloud Foundry
2022-04-21 00:00:00
centos
centos
expat security update
2022-03-29 22:31:03
rocky
rocky
expat security update
2022-03-16 15:13:06
cbl_mariner
cbl_mariner
CVE-2022-23852 affecting package expat for versions less than 2.4.8-1
2022-04-26 20:17:03
CVE-2022-23852 affecting package expat 2.4.3-1
2022-02-25 01:45:35
CVE-2022-25315 affecting package expat for versions less than 2.4.8-1
2022-04-26 20:17:03
cvelist
cvelist
nvd
nvd
CVE-2022-23852
2022-01-24 02:15:06
CVE-2022-25235
2022-02-16 01:15:07
githubexploit
githubexploit
Exploit for Integer Overflow or Wraparound in Libexpat Project Libexpat
2022-05-10 09:22:18
Exploit for Integer Overflow or Wraparound in Libexpat Project Libexpat
2022-05-12 11:07:10
Exploit for Integer Overflow or Wraparound in Libexpat Project Libexpat
2023-04-06 05:42:39
debiancve
debiancve
cloudlinux
cloudlinux
Fixed 13 CVEs in expat
2022-08-17 18:50:48
cve
cve
veracode
veracode
Denial Of Service (DoS)
2022-01-25 03:40:51
Denial Of Service (DoS)
2022-02-20 22:19:21
cnvd
cnvd
Expat has an unspecified vulnerability (CNVD-2022-18356)
2022-02-21 00:00:00
broadcom
broadcom
redhatcve
redhatcve
checkpoint_advisories
checkpoint_advisories
Expat XML Parser Remote Code Execution (CVE-2022-25236)
2022-08-15 00:00:00
prion
prion
Design/Logic Flaw
2022-02-16 01:15:00
Integer overflow
2022-01-24 02:15:00
Integer overflow
2022-02-18 05:15:00
ubuntucve
ubuntucve
CVE-2022-23852
2022-01-24 00:00:00
CVE-2022-25236
2022-02-15 00:00:00
alpinelinux
alpinelinux
CVE-2022-23852
2022-01-24 02:15:06
CVE-2022-25315
2022-02-18 05:15:08