Lucene search
K

8 matches found

RedHat Linux
RedHat Linux
added 2025/12/04 11:12 p.m.5 views

expat: Integer overflow in defineAttribute in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

9.8CVSS7.6AI score0.03376EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:28 a.m.2 views

SUSE CVE-2022-22824

defineAttribute in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...

7.5CVSS7.9AI score0.03376EPSS
Exploits0References52
RedHat Linux
RedHat Linux
added 2022/11/08 10:1 a.m.4 views

expat: Integer overflow in defineAttribute in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

9.8CVSS7.5AI score0.03376EPSS
Exploits0References5
OSV
OSV
added 2022/08/17 6:50 p.m.9 views

CLSA-2022-1660762248 Fixed 13 CVEs in expat

CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs - CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution - CVE-2022-25315: Fix integer overflow in storeRawNames - CVE-2022-22822: Fix integer overflow in addBinding -...

9.8CVSS7.2AI score0.33936EPSS
Exploits3References1
OSV
OSV
added 2022/08/17 5:26 p.m.10 views

CLSA-2022-1660757175 Fixed 15 CVEs in expat

CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs - CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution - CVE-2022-25315: Fix integer overflow in storeRawNames - CVE-2022-22822: Fix integer overflow in addBinding -...

9.8CVSS7.2AI score0.33936EPSS
Exploits3References1
RedHat Linux
RedHat Linux
added 2022/05/17 7:10 p.m.4 views

expat: Integer overflow in defineAttribute in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

9.8CVSS7.5AI score0.03376EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2022/03/28 12:1 p.m.2 views

expat: Integer overflow in defineAttribute in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

9.8CVSS7.5AI score0.03376EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.3 views

Expat 输入验证错误漏洞

Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in defineAttribute in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary...

9.8CVSS9.3AI score0.03376EPSS
Exploits0References46
Rows per page
Query Builder