Lucene search
AlmaLinuxALSA-2022:5244HistoryJul 01, 2022 - 12:00 a.m.
Moderate: expat security update
2022-07-0100:00:00
errata.almalinux.org
10
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.006 Low
EPSS
Percentile
78.8%
Expat is a C library for parsing XML documents.
Security Fix(es):
- expat: stack exhaustion in doctype parsing (CVE-2022-25313)
- expat: integer overflow in copyString() (CVE-2022-25314)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | ppc64le | expat-devel | < 2.2.10-12.el9_0.2 | expat-devel-2.2.10-12.el9_0.2.ppc64le.rpm |
| almalinux | 9 | ppc64le | expat | < 2.2.10-12.el9_0.2 | expat-2.2.10-12.el9_0.2.ppc64le.rpm |
| almalinux | 9 | i686 | expat-devel | < 2.2.10-12.el9_0.2 | expat-devel-2.2.10-12.el9_0.2.i686.rpm |
| almalinux | 9 | i686 | expat | < 2.2.10-12.el9_0.2 | expat-2.2.10-12.el9_0.2.i686.rpm |
| almalinux | 9 | x86_64 | expat-devel | < 2.2.10-12.el9_0.2 | expat-devel-2.2.10-12.el9_0.2.x86_64.rpm |
| almalinux | 9 | x86_64 | expat | < 2.2.10-12.el9_0.2 | expat-2.2.10-12.el9_0.2.x86_64.rpm |
| almalinux | 9 | aarch64 | expat | < 2.2.10-12.el9_0.2 | expat-2.2.10-12.el9_0.2.aarch64.rpm |
| almalinux | 9 | aarch64 | expat-devel | < 2.2.10-12.el9_0.2 | expat-devel-2.2.10-12.el9_0.2.aarch64.rpm |
| almalinux | 9 | s390x | expat | < 2.2.10-12.el9_0.2 | expat-2.2.10-12.el9_0.2.s390x.rpm |
| almalinux | 9 | s390x | expat-devel | < 2.2.10-12.el9_0.2 | expat-devel-2.2.10-12.el9_0.2.s390x.rpm |
Related
nessus
nessus
Oracle Linux 8 : expat (ELSA-2022-5314)
2022-06-30 00:00:00
NewStart CGSL MAIN 6.02 : expat Multiple Vulnerabilities (NS-SA-2022-0104)
2022-12-19 00:00:00
AlmaLinux 9 : expat (ALSA-2022:5244)
2022-11-16 00:00:00
redhat
redhat
(RHSA-2022:5244) Moderate: expat security update
2022-06-28 08:27:13
(RHSA-2022:5314) Moderate: expat security update
2022-06-28 10:52:05
(RHSA-2022:7811) Important: mingw-expat security update
2022-11-08 06:30:08
osv
osv
Moderate: expat security update
2022-06-30 00:00:00
Moderate: expat security update
2022-07-01 00:00:00
Moderate: expat security update
2022-06-28 10:52:05
oraclelinux
oraclelinux
expat security update
2022-06-30 00:00:00
expat security update
2022-06-30 00:00:00
rocky
rocky
expat security update
2022-06-28 10:52:05
almalinux
almalinux
Moderate: expat security update
2022-06-30 00:00:00
Important: mingw-expat security update
2022-11-08 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5320-1)
2022-03-11 00:00:00
Fedora: Security Advisory for mingw-expat (FEDORA-2022-3d9d67f558)
2022-03-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0713-1)
2022-03-05 00:00:00
cloudfoundry
cloudfoundry
USN-5320-1: Expat vulnerabilities and regression | Cloud Foundry
2022-04-21 00:00:00
ubuntu
ubuntu
Expat vulnerabilities and regression
2022-03-10 00:00:00
suse
suse
Security update for expat (important)
2022-03-04 00:00:00
Security update for expat (important)
2022-07-06 00:00:00
redos
redos
ROS-20220225-01
2022-02-25 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: mingw-expat-2.4.6-1.fc35
2022-03-01 18:20:49
[SECURITY] Fedora 34 Update: mingw-expat-2.4.6-1.fc34
2022-03-01 18:37:17
debian
debian
[SECURITY] [DSA 5085-1] expat security update
2022-02-22 20:17:14
[SECURITY] [DLA 2935-1] expat security update
2022-03-07 13:35:55
prion
prion
Integer overflow
2022-02-18 05:15:00
Stack overflow
2022-02-18 05:15:00
mageia
mageia
Updated expat packages fix security vulnerability
2022-02-22 23:15:16
slackware
slackware
[slackware-security] expat
2022-02-20 05:16:42
debiancve
debiancve
CVE-2022-25314
2022-02-18 05:15:00
CVE-2022-25313
2022-02-18 05:15:00
ibm
ibm
cve
cve
CVE-2022-25314
2022-02-18 05:15:00
CVE-2022-25313
2022-02-18 05:15:00
photon
photon
Moderate Photon OS Security Update - PHSA-2022-0369
2022-03-04 00:00:00
Moderate Photon OS Security Update - PHSA-2022-3.0-0369
2022-03-10 00:00:00
Critical Photon OS Security Update - PHSA-2022-0366
2022-02-28 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-25313 affecting package expat 2.4.3-2
2022-04-26 20:17:03
CVE-2022-25313 affecting package expat 2.4.4-1
2022-03-09 18:31:42
CVE-2022-25314 affecting package expat 2.4.4-1
2022-03-09 18:31:42
veracode
veracode
Denial Of Service (DoS)
2022-02-20 22:20:00
Denial Of Service (DoS)
2022-02-20 22:19:59
ubuntucve
ubuntucve
CVE-2022-25313
2022-02-18 00:00:00
CVE-2022-25314
2022-02-18 00:00:00
redhatcve
redhatcve
CVE-2022-25313
2022-02-21 04:45:32
CVE-2022-25314
2022-02-21 05:22:04
cnvd
cnvd
Expat has an unspecified vulnerability (CNVD-2022-18354)
2022-02-22 00:00:00
Expat integer overflow vulnerability (CNVD-2022-18353)
2022-02-22 00:00:00
githubexploit
githubexploit
Exploit for Uncontrolled Recursion in Libexpat Project Libexpat
2022-05-11 07:40:30
Exploit for Integer Overflow or Wraparound in Libexpat Project Libexpat
2022-05-11 09:11:39
Exploit for Uncontrolled Recursion in Libexpat Project Libexpat
2023-04-12 04:51:25
alpinelinux
alpinelinux
CVE-2022-25313
2022-02-18 05:15:00
CVE-2022-25314
2022-02-18 05:15:00
broadcom
broadcom
amazon
amazon
Medium: expat
2023-09-27 22:49:00
aix
aix
AIX is affected by multiple vulnerabilities in Python
2022-07-28 13:12:18
gentoo
gentoo
Expat: Multiple Vulnerabilities
2022-09-29 00:00:00
ics
ics
Siemens SINEMA Remote Connect Server
2022-06-16 12:00:00
Hitachi Energy AFS65x, AFF66x, AFS67x, and AFR67x Series Products
2023-10-05 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
avleonov
avleonov
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.006 Low
EPSS
Percentile
78.8%
Related for ALSA-2022:5244