TI-2022-09008 CVE-2022-25315 · GHSA-8w4r-jhg8-8rvj
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
Priority HIGH 82
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
RHSA-2022:1053
Red Hat Virtualization Host security and enhancement update [ovirt-4.4.10] Async #2
Released 2022-03-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.4.10-202203211649_8.5, redhat-virtualization-host-image-update-4.4.10-202203211649_8.5
Fixes 3 records
TI-2022-08947 CVE-2022-25236 · GHSA-3c6c-gjpg-qq92
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert…
Priority HIGH 75
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
TI-2022-08946 CVE-2022-25235 · GHSA-8mw4-grgw-m3fp
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding…
Priority MEDIUM 57
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.