586 matches found
AZL-43681 CVE-2022-25235 affecting package ogdi 4.1.0-9
xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...
[SECURITY] Fedora 34 Update: expat-2.4.4-1.fc34
This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...
The vulnerability of the lookupl function in the xmlparse.c library of the Expat library, related to integer overflow, allows an attacker to cause a service failure.
The vulnerability of the lookup function in the xmlparse.c file of the Expat library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the `defineAttribute` function in the `xmlparse.c` file of the ExPat library allows a hacker to cause a service failure.
The vulnerability of the defineAttribute function in the xmlparse.c file of the ExPat library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...
UBUNTU-CVE-2022-25236
xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs...
UBUNTU-CVE-2022-25235
xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...
PT-2022-1764
Name of the Vulnerable Software and Affected Versions Expat versions prior to 2.4.5 Description The issue is related to the incorrect handling of encoding validation in the xmltok impl.c component of the Expat library, specifically lacking checks for whether a UTF-8 character is valid in a certai...
OESA-2022-1511 expat security update
An XML parser library. Security Fixes: Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES.CVE-2022-23852 Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function.CVE-2022-23990...
Tenable Nessus 10.x < 10.1.1 / 8.x < 8.15.3 Third-Party Vulnerabilities (TNS-2022-05)
According to its self-reported version, the Tenable Nessus application running on the remote host is 10.x prior to 10.1.1, or 8.15.3 or earlier. It is, therefore, affected by multiple vulnerabilities in a third-party library, including: - addBinding in xmlparse.c in Expat aka libexpat before 2.4....
Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
...
[SECURITY] [DLA 2904-1] expat security update
Debian LTS Advisory DLA-2904-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 30, 2022 https://wiki.debian.org/LTS Package : expat Version : 2.2.0-2+deb9u4 CVE ID : CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825...
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer for configurations with a nonzero XML_CONTEXT_BYTES.
...
Mageia: Security Advisory (MGASA-2017-0214)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UBUNTU-CVE-2022-23990
Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function...
ALPINE-CVE-2022-23852
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
AZL-7835 CVE-2022-23852 affecting package expat for versions less than 2.4.8-1
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
DEBIAN-CVE-2022-23852
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
UBUNTU-CVE-2022-23852
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
OESA-2022-1490 expat security update
An XML parser library. Security Fixes: In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory.CVE-2021-45960 lookup in xmlparse.c in Expat aka libexpat...