The vulnerability of the XML_ExternalEntityParserCreate function in the XML syntax analyzer library libexpat allows a attacker to cause a service failure.

🗓️ 22 May 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The Expat library vulnerability in XML_ExternalEntityParserCreate may cause service failure after release.

Reporter	Title	Published	Views	Family All 281
IBM Security Bulletins	Security Bulletin: IBM Security Verify Access Appliance has multiple security vulnerabilities	14 Oct 202305:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2022-43680, CVE-2013-0340, CVE-2017-9233)	13 Dec 202205:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	30 Mar 202315:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libexpat (CVE-2022-43680) affects Power HMC	3 Jun 202310:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Expat component shipped with IBM Rational ClearCase [CVE-2022-40674, CVE-2022-43680]	31 Jan 202314:01	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is affected by a denial of service (CVE-2022-43680) due to Python	22 Dec 202217:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to denial of service due to libexpat (CVE-2022-43680, CVE-2013-0340, CVE-2017-9233)	22 Nov 202215:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM HTTP Server used by IBM Rational ClearQuest (CVE-2022-43680, CVE-2013-0340, CVE-2017-9233)	2 Dec 202202:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from libxml2, expat, libtasn1 and systemd	25 Jan 202316:27	–	ibm

Vulners

Node

hitachi,aff660/665Range≤03.0.02aurora

hitachi,afs660/665sRange≤7.1.05aurora

hitachi,afs670v2Range≤7.1.05aurora

hitachi,afs670/675Range≤9.1.07aurora

hitachi,afr67xRange≤9.1.07aurora

hitachi,afs660/665cRange≤7.1.05aurora

yokogawa_electric grvsw-663faRange≤09.1.07aurora

yokogawa_electric grvsw-664faRange≤09.1.07aurora

yokogawa_electric grvsw-665faRange≤09.1.07aurora

yokogawa_electric grvsw-666faRange≤09.1.07aurora

yokogawa_electric grvsw-667faRange≤09.1.07aurora

yokogawa_electric grvsw-668faRange≤09.1.07aurora

yokogawa_electric grvsw-669faRange≤09.1.07aurora

yokogawa_electric grvsw-670faRange≤09.1.07aurora

yokogawa_electric grvsw-671faRange≤09.1.07aurora

yokogawa_electric grvsw-672faRange≤09.1.07aurora

yokogawa_electric grvsw-673faRange≤09.1.07aurora

yokogawa_electric grvsw-660faRange≤09.1.07aurora

yokogawa_electric grvsw-661faRange≤09.1.07aurora

yokogawa_electric grvsw-662faRange≤09.1.07aurora

red_hat red_hat_enterprise_linuxMatch7

red_hat red_hat_enterprise_linuxMatch8

fedora fedoraMatch35

fedora fedoraMatch36

red_hat red_hat_enterprise_linuxMatch9

fedora fedoraMatch37

canonical ubuntuMatch22.10

Source	Link
github	www.github.com/libexpat/libexpat/issues/649
github	www.github.com/libexpat/libexpat/issues/616
github	www.github.com/libexpat/libexpat/issues/650
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-43680
access	www.access.redhat.com/security/cve/CVE-2022-43680
ubuntu	www.ubuntu.com/security/notices/USN-5638-3
ubuntu	www.ubuntu.com/security/notices/USN-5638-2
ubuntu	www.ubuntu.com/security/notices/USN-5638-4
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/AJ5VY2VYXE4WTRGQ6LMGLF6FV3SY37YE/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/BY4OPSIB33ETNUXZY2UPZ4NGQ3OKDY4D/

05 Sep 2025 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 37.5

CVSS 27.8

EPSS0.02241