TI-2022-09007 CVE-2022-25314 · GHSA-3qc2-95g6-46cj
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
Priority MEDIUM 47
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
RHSA-2022:5314
expat security update
Released 2022-06-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) expat-2.2.5-8.el8_6.2, expat-devel-2.2.5-8.el8_6.2
Fixes 2 records
TI-2022-09006 CVE-2022-25313 · GHSA-3gf2-723m-w3fv
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in…
Priority LOW 35
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.