TI-2022-09008 CVE-2022-25315 · GHSA-8w4r-jhg8-8rvj
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
Priority HIGH 82
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
RHSA-2022:1069
expat security update
Released 2022-03-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) expat-2.1.0-14.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) expat-devel-2.1.0-14.el7_9, expat-static-2.1.0-14.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) expat-devel-2.1.0-14.el7_9, expat-static-2.1.0-14.el7_9
- Red Hat Enterprise Linux Server (v. 7) expat-2.1.0-14.el7_9, expat-2.1.0-14.el7_9.ppc, expat-devel-2.1.0-14.el7_9 +1
- Red Hat Enterprise Linux Server Optional (v. 7) expat-static-2.1.0-14.el7_9, expat-static-2.1.0-14.el7_9.ppc
- Red Hat Enterprise Linux Workstation (v. 7) expat-2.1.0-14.el7_9, expat-devel-2.1.0-14.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) expat-static-2.1.0-14.el7_9
Fixes 12 records
TI-2022-08947 CVE-2022-25236 · GHSA-3c6c-gjpg-qq92
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert…
Priority HIGH 75
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
TI-2021-20962 CVE-2021-45960 · GHSA-pfmv-2r4f-j9mj
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the…
Priority HIGH 73
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
TI-2021-21076 CVE-2021-46143 · GHSA-j6g2-cvhq-p8xr
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
Priority HIGH 70
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
TI-2022-08946 CVE-2022-25235 · GHSA-8mw4-grgw-m3fp
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding…
Priority MEDIUM 57
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
TI-2022-07855 CVE-2022-23852 · GHSA-h83g-c7g2-6r9h
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for…
Priority MEDIUM 57
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
TI-2022-07066 CVE-2022-22822 · GHSA-6rvw-hw83-3745
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
Priority MEDIUM 57
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
TI-2022-07068 CVE-2022-22824 · GHSA-5pj8-9wmw-j96m
defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
Priority MEDIUM 55
defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
TI-2022-07067 CVE-2022-22823 · GHSA-g654-6pp3-8m8w
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
Priority MEDIUM 55
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
TI-2022-07071 CVE-2022-22827 · GHSA-97f8-83vc-c97q
storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
Priority MEDIUM 46
storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
TI-2022-07070 CVE-2022-22826 · GHSA-q5xc-gwgw-8j5q
nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
Priority MEDIUM 46
nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
TI-2022-07069 CVE-2022-22825 · GHSA-2h26-9fpg-gcx8
lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
Priority MEDIUM 46
lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.