Red Hat Security AdvisoryRHSA-2022:7692
xmlrpc-c security update
Released 2022-11-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) xmlrpc-c-c++-1.51.0-8.el8, xmlrpc-c-client++-1.51.0-8.el8, xmlrpc-c-devel-1.51.0-8.el8
- Red Hat Enterprise Linux BaseOS (v. 8) xmlrpc-c-1.51.0-8.el8, xmlrpc-c-client-1.51.0-8.el8
Fixes 7 records
Priority HIGH 70
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.04465 · Published 2022-01-06 · Partial fix CWE-190
Priority MEDIUM 57
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0548 · Published 2022-01-08 · Partial fix CWE-190
Priority MEDIUM 55
defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03866 · Published 2022-01-08 · Partial fix CWE-190
Priority MEDIUM 55
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03866 · Published 2022-01-08 · Partial fix CWE-190
Priority MEDIUM 46
storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03182 · Published 2022-01-08 · Partial fix CWE-190
Priority MEDIUM 46
nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03182 · Published 2022-01-08 · Partial fix CWE-190
Priority MEDIUM 46
lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02994 · Published 2022-01-08 · Partial fix CWE-190
THREATIST.IORead the docs