Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-25235HistoryFeb 16, 2022 - 1:15 a.m.
CVE-2022-25235
2022-02-1601:15:07
Debian Security Bug Tracker
security-tracker.debian.org
39
expat
libexpat
2.4.5
validation
encoding
utf-8
character
context
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.01
Percentile
84.3%
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | expat | < 2.4.5-1 | expat_2.4.5-1_all.deb |
| Debian | 11 | all | expat | < 2.2.10-2+deb11u2 | expat_2.2.10-2+deb11u2_all.deb |
| Debian | 999 | all | expat | < 2.4.5-1 | expat_2.4.5-1_all.deb |
| Debian | 13 | all | expat | < 2.4.5-1 | expat_2.4.5-1_all.deb |
Related
nessus
nessus
RHEL 8 : xmlrpc-c (RHSA-2022:1643)
2022-04-29 00:00:00
Amazon Linux AMI : xmlrpc-c (ALAS-2022-1585)
2022-05-24 00:00:00
Oracle Linux 8 : xmlrpc-c (ELSA-2022-1643)
2022-05-02 00:00:00
amazon
amazon
Critical: xmlrpc-c
2022-05-20 22:12:00
Critical: xmlrpc-c
2022-05-20 22:22:00
Critical: expat
2022-03-09 22:13:00
osv
osv
Important: xmlrpc-c security update
2022-04-28 14:07:17
Important: xmlrpc-c security update
2022-04-28 14:07:17
CVE-2022-25235
2022-02-16 01:15:07
cnvd
cnvd
Expat has an unspecified vulnerability (CNVD-2022-18356)
2022-02-21 00:00:00
almalinux
almalinux
Important: xmlrpc-c security update
2022-04-28 14:07:17
Important: mingw-expat security update
2022-11-08 00:00:00
Critical: firefox security update
2022-03-10 14:36:51
oraclelinux
oraclelinux
xmlrpc-c security update
2022-05-02 00:00:00
expat security update
2022-05-06 00:00:00
firefox security and bug fix update
2022-03-10 00:00:00
rocky
rocky
xmlrpc-c security update
2022-04-28 14:07:17
firefox security update
2022-03-10 14:36:51
thunderbird security update
2022-03-14 09:49:10
cbl_mariner
cbl_mariner
CVE-2022-25235 affecting package expat for versions less than 2.4.8-1
2022-04-26 20:17:03
CVE-2022-25235 affecting package expat 2.4.4-1
2022-03-09 18:31:42
ubuntucve
ubuntucve
CVE-2022-25235
2022-02-15 00:00:00
prion
prion
Design/Logic Flaw
2022-02-16 01:15:00
redhat
redhat
(RHSA-2022:1644) Important: xmlrpc-c security update
2022-04-28 14:07:27
(RHSA-2022:1643) Important: xmlrpc-c security update
2022-04-28 14:07:17
(RHSA-2022:1539) Important: xmlrpc-c security update
2022-04-26 09:54:14
veracode
veracode
Cross-Site Scripting (XSS)
2022-02-17 08:28:38
cve
cve
CVE-2022-25235
2022-02-16 01:15:07
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0183)
2022-05-19 00:00:00
Fedora: Security Advisory for thunderbird (FEDORA-2022-f202d1a045)
2022-03-23 00:00:00
Fedora: Security Advisory for thunderbird (FEDORA-2022-01f0553b59)
2022-03-23 00:00:00
nvd
nvd
CVE-2022-25235
2022-02-16 01:15:07
redhatcve
redhatcve
CVE-2022-25235
2022-02-21 05:51:26
githubexploit
githubexploit
mageia
mageia
Updated xmlrpc-c packages fix security vulnerability
2022-05-15 13:06:40
Updated expat packages fix security vulnerability
2022-02-22 23:15:16
Updated firefox/nss/rootcerts packages fix security vulnerability
2022-04-29 01:46:19
broadcom
broadcom
cvelist
cvelist
CVE-2022-25235
2022-02-16 00:40:20
alpinelinux
alpinelinux
CVE-2022-25235
2022-02-16 01:15:07
fedora
fedora
[SECURITY] Fedora 36 Update: thunderbird-102.7.1-2.fc36
2023-02-03 01:42:19
[SECURITY] Fedora 35 Update: thunderbird-91.7.0-1.fc35
2022-03-17 15:49:04
[SECURITY] Fedora 34 Update: thunderbird-91.7.0-1.fc34
2022-03-18 19:15:01
photon
photon
Critical Photon OS Security Update - PHSA-2022-0444
2022-02-25 00:00:00
Critical Photon OS Security Update - PHSA-2022-0475
2022-02-25 00:00:00
Critical Photon OS Security Update - PHSA-2022-0157
2022-02-21 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in IBM HTTP Server shipped in IBM WebSphere Application Server Patterns due to Expat vulnerabilities
2022-04-29 19:27:25
f5
f5
suse
suse
Security update for expat (important)
2022-03-04 00:00:00
Security update for expat (important)
2022-07-06 00:00:00
redos
redos
ROS-20220225-01
2022-02-25 00:00:00
debian
debian
[SECURITY] [DSA 5085-1] expat security update
2022-02-22 20:17:14
[SECURITY] [DLA 2935-1] expat security update
2022-03-07 13:35:55
slackware
slackware
[slackware-security] expat
2022-02-20 05:16:42
centos
centos
firefox security update
2022-03-29 13:53:09
thunderbird security update
2022-03-29 13:54:14
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.01
Percentile
84.3%
Related for DEBIANCVE:CVE-2022-25235