4110 matches found
GLSA-202209-24 : Expat: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202209-24 Expat: Multiple Vulnerabilities - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only...
Expat: Multiple Vulnerabilities
Background Expat is a set of XML parsing libraries. Description Multiple vulnerabilities have been discovered in Expat. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at this...
FreeBSD : expat -- Heap use-after-free vulnerability (0a0670a1-3e1a-11ed-b48b-e0d55e2a8bf9)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0a0670a1-3e1a-11ed-b48b-e0d55e2a8bf9 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 No...
USN-5638-1: Expat vulnerability
Rhodri James discovered that Expat incorrectly handled memory when processing certain malformed XML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code...
USN-5638-1 expat vulnerability
Rhodri James discovered that Expat incorrectly handled memory when processing certain malformed XML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code...
Fixed CVE-2022-40674 in expat
CVE-2022-40674: Ensure raw tagnames are safe exiting internalEntityParser - fix tests leak - fix xmlparse leak...
CLSA-2022-1664193203 Fixed CVE-2022-40674 in expat
CVE-2022-40674: Ensure raw tagnames are safe exiting internalEntityParser - fix tests leak - fix xmlparse leak...
CLSA-2022-1664192896 Fixed CVE-2022-40674 in expat
CVE-2022-40674: Ensure raw tagnames are safe exiting internalEntityParser...
CLSA-2022-1664192814 Fixed CVE-2022-40674 in expat
CVE-2022-40674: Ensure raw tagnames are safe exiting internalEntityParser...
CLSA-2022-1664192692 Fixed CVE-2022-40674 in expat
CVE-2022-40674: Ensure raw tagnames are safe exiting internalEntityParser - fix tests leak - fix xmlparse leak...
Debian: Security Advisory (DLA-3119-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-3119 : expat - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3119 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3119-1 [email protected] https://www.debian.org/lts/security/...
[SECURITY] [DLA 3119-1] expat security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3119-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 25, 2022 https://wiki.debian.org/LTS -...
DLA-3119-1 expat - security update
Bulletin has no description...
Debian: Security Advisory (DSA-5236-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-40674 affecting package expat for versions less than 2.4.8-2
CVE-2022-40674 affecting package expat for versions less than 2.4.8-2. A patched version of the package is available...
Security Bulletin: Multiple security vulnerabilities may affect IBM DB2 shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-38931,CVE-2021-20373)
Summary IBM DB2 is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. Information about security vulnerabilities affecting DB2 has been published in multiple security bulletins as below. Interim fix is provided by DB2 for each of the fix pack...
[SECURITY] [DSA 5236-1] expat security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5236-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 22, 2022 https://www.debian.org/security/faq -...
Debian DSA-5236-1 : expat - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5236 advisory. Rhodri James discovered a heap use-after-free vulnerability in the doContent function in Expat, an XML parsing C library, which could result in denial of service or...