168 matches found
MGASA-2022-0352 Updated expat packages fix security vulnerability
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674...
Updated expat packages fix security vulnerability
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674...
SUSE-SU-2022:3489-1 Security update for expat
This update for expat fixes the following issues: - CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c bsc1203438...
SUSE: Security Advisory (SUSE-SU-2022:3466-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:3466-1 Security update for expat
This update for expat fixes the following issues: - CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c bsc1203438...
GLSA-202209-24 : Expat: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202209-24 Expat: Multiple Vulnerabilities - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only...
FreeBSD : expat -- Heap use-after-free vulnerability (0a0670a1-3e1a-11ed-b48b-e0d55e2a8bf9)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0a0670a1-3e1a-11ed-b48b-e0d55e2a8bf9 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 No...
Ubuntu: Security Advisory (USN-5638-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fixed CVE-2022-40674 in expat
CVE-2022-40674: Ensure raw tagnames are safe exiting internalEntityParser - fix tests leak - fix xmlparse leak...
CLSA-2022-1664193203 Fixed CVE-2022-40674 in expat
CVE-2022-40674: Ensure raw tagnames are safe exiting internalEntityParser - fix tests leak - fix xmlparse leak...
CLSA-2022-1664192896 Fixed CVE-2022-40674 in expat
CVE-2022-40674: Ensure raw tagnames are safe exiting internalEntityParser...
CLSA-2022-1664192692 Fixed CVE-2022-40674 in expat
CVE-2022-40674: Ensure raw tagnames are safe exiting internalEntityParser - fix tests leak - fix xmlparse leak...
[SECURITY] [DLA 3119-1] expat security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3119-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 25, 2022 https://wiki.debian.org/LTS -...
CVE-2022-40674 affecting package expat for versions less than 2.4.8-2
CVE-2022-40674 affecting package expat for versions less than 2.4.8-2. A patched version of the package is available...
[SECURITY] [DSA 5236-1] expat security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5236-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 22, 2022 https://www.debian.org/security/faq -...
Debian DSA-5236-1 : expat - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5236 advisory. Rhodri James discovered a heap use-after-free vulnerability in the doContent function in Expat, an XML parsing C library, which could result in denial of service or...
Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current expat Vulnerability (SSA:2022-263-01)
The version of expat installed on the remote host is prior to 2.4.3 / 2.4.9. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-263-01 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Nessus has not...
CVE-2022-40674
creationtimestamp| type| source ---|---|--- 2022-09-14 14:26:28+00:00| seen| https://t.me/cibsecurity/49763 2023-12-11 07:37:19+00:00| seen| https://t.me/arpsyndicate/1715 2023-12-18 01:52:41+00:00| seen| https://t.me/arpsyndicate/1885 2025-04-15 10:00:00+00:00| seen|...
