In closeString of xmlparse.c, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

android.googlesource.com/platform/external/expat/+/257f1d3777240016d3ccd74a61cd7d0e0efcaae3

source.android.com/security/bulletin/2022-09-01

ubuntucve 1

slackware 1

prion 1

fedora 2

osv 6

redhatcve 1

nessus 45

cvelist 1

cbl_mariner 2

debiancve 1

cve 1

cnvd 1

amazon 2

openvas 32

rocky 1

alpinelinux 1

oraclelinux 2

githubexploit 2

veracode 1

nvd 1

suse 1

mageia 1

ibm 19

redos 1

photon 6

almalinux 1

redhat 2

malwarebytes 1

debian 2

cloudfoundry 1

ubuntu 1

cloudlinux 1

ics 3

aix 1

gentoo 1

oracle 3

avleonov 1

ubuntucve

CVE-2022-23990

2022-01-26 00:00:00

slackware

[slackware-security] expat

2022-01-27 22:58:35

prion

Integer overflow

2022-01-26 19:15:00

fedora

[SECURITY] Fedora 35 Update: mingw-expat-2.4.4-1.fc35

2022-02-12 01:20:38

[SECURITY] Fedora 34 Update: mingw-expat-2.4.4-1.fc34

2022-02-12 01:16:47

osv

CVE-2022-23990

2022-01-26 19:15:08

expat-2.4.4-1.1 on GA media

2024-06-15 00:00:00

Important: mingw-expat security update

2022-11-08 00:00:00

redhatcve

CVE-2022-23990

2022-01-31 04:59:08

nessus

Rocky Linux 8 : mingw-expat (RLSA-2022:7811)

2023-01-30 00:00:00

Oracle Linux 8 : expat (ELSA-2022-9232)

2022-03-18 00:00:00

Photon OS 4.0: Expat PHSA-2022-4.0-0153

2024-07-23 00:00:00

cvelist

CVE-2022-23990

2022-01-26 18:02:02

cbl_mariner

CVE-2022-23990 affecting package expat for versions less than 2.4.8-1

2022-04-26 20:17:03

CVE-2022-23990 affecting package expat 2.4.3-1

2022-02-25 01:45:35

debiancve

CVE-2022-23990

2022-01-26 19:15:08

cve

CVE-2022-23990

2022-01-26 19:15:08

cnvd

Expat integer overflow vulnerability

2022-01-28 00:00:00

amazon

Medium: expat

2023-10-30 23:31:00

Medium: expat

2023-09-27 22:49:00

openvas

Fedora: Security Advisory for mingw-expat (FEDORA-2022-d2abd0858e)

2022-02-12 00:00:00

Slackware: Security Advisory (SSA:2022-027-01)

2022-04-21 00:00:00

Fedora: Security Advisory for mingw-expat (FEDORA-2022-88f6a3d290)

2022-02-12 00:00:00

rocky

mingw-expat security update

2023-01-30 05:21:15

alpinelinux

CVE-2022-23990

2022-01-26 19:15:08

oraclelinux

expat security update

2022-03-18 00:00:00

expat security update

2022-03-16 00:00:00

githubexploit

Exploit for Integer Overflow or Wraparound in Libexpat Project Libexpat

2022-04-27 11:46:00

Exploit for Integer Overflow or Wraparound in Libexpat Project Libexpat

2022-04-28 05:39:11

veracode

Integer Overflow

2022-01-27 03:56:50

nvd

CVE-2022-23990

2022-01-26 19:15:08

suse

Security update for expat (important)

2022-02-18 00:00:00

mageia

Updated expat packages fix security vulnerability

2022-02-03 23:29:44

ibm

Security Bulletin: Due to use of Expat, IBM Tivoli Network Manager is vulnerable to arbiraty code execution (CVE-2022-23990 and CVE-2022-23852)

2022-07-21 04:24:34

Security Bulletin: Vulnerabilities in Expat (AKA libexpat) affect IBM Storage Protect for Virtual Environments: Data Protection for VMware (CVE-2022-23852, CVE-2022-23990)

2023-10-11 14:40:42

Security Bulletin: IBM® Db2® is affected by multiple vulnerabilities in the included Expat 3rd party library (CVE-2022-23852 and CVE-2022-23990)

2022-04-20 14:28:59

redos

ROS-20220330-02

2022-03-30 00:00:00

photon

Critical Photon OS Security Update - PHSA-2022-0437

2022-02-04 00:00:00

Critical Photon OS Security Update - PHSA-2022-0467

2022-02-04 00:00:00

Critical Photon OS Security Update - PHSA-2022-0358

2022-02-07 00:00:00

almalinux

Important: mingw-expat security update

2022-11-08 00:00:00

redhat

(RHSA-2022:7811) Important: mingw-expat security update

2022-11-08 06:30:08

(RHSA-2022:7144) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update

2022-10-26 20:04:31

malwarebytes

Oracle releases massive Critical Patch Update containing 520 security patches

2022-04-20 14:53:54

debian

[SECURITY] [DLA 2904-1] expat security update

2022-01-30 21:42:20

[SECURITY] [DSA 5073-1] expat security update

2022-02-12 13:32:08

cloudfoundry

USN-5288-1: Expat vulnerabilities | Cloud Foundry

2022-04-21 00:00:00

ubuntu

Expat vulnerabilities

2022-02-21 00:00:00

cloudlinux

Fixed 13 CVEs in expat

2022-08-17 18:50:48

ics

Hitachi Energy AFS65x, AFF66x, AFS67x, and AFR67x Series Products

2023-10-05 12:00:00

Siemens SINEMA Remote Connect Server

2022-06-16 12:00:00

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

2023-12-14 12:00:00

aix

AIX is affected by multiple vulnerabilities in Python

2022-07-28 13:12:18

gentoo

Expat: Multiple Vulnerabilities

2022-09-29 00:00:00

oracle

Oracle Critical Patch Update Advisory - October 2023

2023-10-17 00:00:00

Oracle Critical Patch Update Advisory - October 2022

2022-10-18 00:00:00

Oracle Critical Patch Update Advisory - April 2022

2022-04-19 00:00:00

avleonov

Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs

2022-12-30 18:03:13

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.6

Confidence

High

EPSS

0.009

Percentile

83.4%

JSON

Related for OSV:ASB-A-221256678