Lucene search
F5F5:K91589041HistoryMay 01, 2022 - 12:00 a.m.
K91589041 : Expat vulnerabilities CVE-2021-45960, CVE-2022-22825, CVE-2022-22826, and CVE-2022-22827
2022-05-0100:00:00
my.f5.com
61
expat
xml
parsing
cve-2021-45960
cve-2022-22825
cve-2022-22826
cve-2022-22827
buffer over-read
Security Advisory Description
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
Impact
A remote attacker could send specially crafted XML which, when parsed by an application using the Expat library, would result in a buffer over-read and cause the application to stop responding.
Related
nessus
nessus
F5 Networks BIG-IP : Expat vulnerabilities (K91589041)
2022-05-01 00:00:00
EulerOS 2.0 SP10 : expat (EulerOS-SA-2022-1502)
2022-04-20 00:00:00
Photon OS 4.0: Expat PHSA-2022-4.0-0145
2024-07-23 00:00:00
slackware
slackware
[slackware-security] expat
2022-01-16 21:48:11
mageia
mageia
Updated expat packages fix security vulnerability
2022-01-25 15:13:11
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0031)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:14878-1)
2022-01-26 00:00:00
openSUSE: Security Advisory for expat (openSUSE-SU-2022:0178-1)
2022-02-08 00:00:00
suse
suse
Security update for expat (important)
2022-01-25 00:00:00
hp
hp
Expat Library update for Teradici PCoIP Software and Firmware
2022-04-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package expat version 2.4.3-alt1
2022-01-31 00:00:00
osv
osv
expat-2.4.3-1.1 on GA media
2024-06-15 00:00:00
expat - security update
2022-02-12 00:00:00
Moderate: xmlrpc-c security update
2022-11-08 00:00:00
ibm
ibm
ubuntucve
ubuntucve
photon
photon
Critical Photon OS Security Update - PHSA-2022-0462
2022-01-22 00:00:00
Critical Photon OS Security Update - PHSA-2022-0431
2022-01-23 00:00:00
Critical Photon OS Security Update - PHSA-2022-0353
2022-01-19 00:00:00
debian
debian
[SECURITY] [DLA 2904-1] expat security update
2022-01-30 21:42:20
[SECURITY] [DSA 5073-1] expat security update
2022-02-12 13:32:08
amazon
amazon
rocky
rocky
xmlrpc-c security update
2022-11-08 06:26:32
expat security update
2022-03-16 15:13:06
redhat
redhat
(RHSA-2022:7692) Moderate: xmlrpc-c security update
2022-11-08 06:26:32
(RHSA-2022:0951) Important: expat security update
2022-03-16 15:13:06
(RHSA-2022:1069) Important: expat security update
2022-03-28 08:42:24
oraclelinux
oraclelinux
xmlrpc-c security update
2022-11-15 00:00:00
expat security update
2022-03-16 00:00:00
expat security update
2022-03-28 00:00:00
almalinux
almalinux
Moderate: xmlrpc-c security update
2022-11-08 00:00:00
Important: expat security update
2022-03-16 00:00:00
prion
prion
Design/Logic Flaw
2022-01-01 19:15:00
Integer overflow
2022-01-10 14:12:00
Integer overflow
2022-01-10 14:12:00
cloudfoundry
cloudfoundry
USN-5288-1: Expat vulnerabilities | Cloud Foundry
2022-04-21 00:00:00
cloudlinux
cloudlinux
Fixed 13 CVEs in expat
2022-08-17 18:50:48
alpinelinux
alpinelinux
cbl_mariner
cbl_mariner
CVE-2022-22825 affecting package expat 2.4.1-2
2022-01-26 22:53:38
CVE-2022-22825 affecting package expat for versions less than 2.4.3-1
2022-04-09 06:51:43
CVE-2021-45960 affecting package expat 2.4.1-2
2022-01-26 22:53:38
debiancve
debiancve
redhatcve
redhatcve
veracode
veracode
Integer Overflow
2022-01-11 06:14:33
Denial Of Service (DoS)
2022-01-11 06:37:28
Denial Of Service (DoS)
2022-01-11 03:52:55
githubexploit
githubexploit
Exploit for Incorrect Calculation in Libexpat Project Libexpat
2022-04-11 11:45:57
Exploit for Incorrect Calculation in Libexpat Project Libexpat
2023-04-06 06:20:55
Exploit for Incorrect Calculation in Libexpat Project Libexpat
2022-05-25 09:03:48
cnvd
cnvd
Expat has an unspecified vulnerability
2022-01-05 00:00:00
Expat storeAtt function buffer overflow vulnerability
2022-01-14 00:00:00
Expat lookup function buffer overflow vulnerability
2022-01-14 00:00:00
ubuntu
ubuntu
Expat vulnerabilities
2022-02-21 00:00:00
centos
centos
expat security update
2022-03-29 22:31:03
cve
cve
cvelist
cvelist
nvd
nvd
ics
ics
Hitachi Energy AFS65x, AFF66x, AFS67x, and AFR67x Series Products
2023-10-05 12:00:00
aix
aix
AIX is affected by multiple vulnerabilities in Python
2022-07-28 13:12:18
gentoo
gentoo
Expat: Multiple Vulnerabilities
2022-09-29 00:00:00