TI-2022-09008 CVE-2022-25315 · GHSA-8w4r-jhg8-8rvj
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
Priority HIGH 82
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
RHSA-2022:7811
mingw-expat security update
Released 2022-11-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) mingw-expat-2.4.8-1.el8, mingw32-expat-2.4.8-1.el8, mingw64-expat-2.4.8-1.el8
Fixes 6 records
TI-2022-08947 CVE-2022-25236 · GHSA-3c6c-gjpg-qq92
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert…
Priority HIGH 75
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
TI-2022-08946 CVE-2022-25235 · GHSA-8mw4-grgw-m3fp
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding…
Priority MEDIUM 57
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
TI-2022-09007 CVE-2022-25314 · GHSA-3qc2-95g6-46cj
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
Priority MEDIUM 47
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
TI-2022-07953 CVE-2022-23990 · GHSA-r3g2-gw56-v728
Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
Priority MEDIUM 46
Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
TI-2022-09006 CVE-2022-25313 · GHSA-3gf2-723m-w3fv
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in…
Priority LOW 35
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.