3931 matches found
CVE-2022-43680
A use-after-free flaw was found in the Expat package, caused by destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations. This may lead to availability disruptions...
CVE-2022-43680 affecting package expat for versions less than 2.5.0-1
CVE-2022-43680 affecting package expat for versions less than 2.5.0-1. An upgraded version of the package is available that resolves this issue...
CLSA-2022-1667495485 expat: Fix of CVE-2022-43680
CVE-2022-43680: Fix overeager DTD destruction...
CLSA-2022-1667494718 expat: Fix of CVE-2022-43680
CVE-2022-43680: Fix overeager DTD destruction...
CLSA-2022-1667493762 expat: Fix of CVE-2022-43680
CVE-2022-43680: Fix overeager DTD destruction...
expat: Fix of CVE-2022-43680
CVE-2022-43680: Fix overeager DTD destruction...
CVE-2022-43680 affecting package expat 2.4.9-1
CVE-2022-43680 affecting package expat 2.4.9-1. An upgraded version of the package is available that resolves this issue...
[R1] Nessus Version 10.4.1 Fixes Multiple Vulnerabilities
R1 Nessus Version 10.4.1 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 11/02/2022 - 17:01 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components OpenSSL, expat were found to contain vulnerabilities, and updated versions have been...
[R1] Nessus Version 10.3.2 Fixes Multiple Vulnerabilities
R1 Nessus Version 10.3.2 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 11/02/2022 - 14:05 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components OpenSSL, expat were found to contain vulnerabilities, and updated versions have been...
CLSA-2022-1667412057 expat: Fix of CVE-2022-43680
CVE-2022-43680: Fix overeager DTD destruction...
python3.9 security update
3.9.10-3 - Security fix for CVE-2020-10735 - Fix the test suite support for Expat = 2.4.5 Resolves: rhbz1834423...
Vulnerability fixed in Expat
Expat developers have fixed a vulnerability. A malicious party could exploit the vulnerability to cause a denial-of-service, or possibly to execute arbitrary code execute arbitrary code with permissions from the application in which the libexpat library is used. The developers of expat have...
Expat: Denial of Service
Background Expat is a set of XML parsing libraries. Description In certain out-of-memory situations, Expat may free memory before it should, leading to a use-after-free. Impact A use-after-free can result in denial of service. Workaround There is no known workaround at this time. Resolution All...
GLSA-202210-38 : Expat: Denial of Service
The remote host is affected by the vulnerability described in GLSA-202210-38 Expat: Denial of Service - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations. CVE-2022-43680 Note that Nessu...
Debian: Security Advisory (DSA-5266-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
F5 Networks BIG-IP : Expat vulnerability (K44454157)
The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.9 / 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K44454157 advisory. libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.CVE-2022-40674ImpactAn...
[SECURITY] [DSA 5266-1] expat security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5266-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2022 https://www.debian.org/security/faq -...
Fedora: Security Advisory for mingw-expat (FEDORA-2022-d93b3bd8b9)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for mingw-expat (FEDORA-2022-c22feb71ba)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...