Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Expat vulnerabilities and regression (USN-5320-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5320-1 advisory. USN-5288-1 fixed several vulnerabilities in Expat. For CVE-2022-25236 it caused a regression and an additional patch was required...

Critical: expat

Issue Overview: A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences for example, from start tag names to the XML processing application on top of expat can lead to arbitrary code execution. This issue is dependent on how invalid UTF-8 is handled inside the XML processor...

Critical: expat

Issue Overview: A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences for example, from start tag names to the XML processing application on top of expat can lead to arbitrary code execution. This issue is dependent on how invalid UTF-8 is handled inside the XML processor...

Amazon Linux 2 : expat (ALAS-2022-1764)

The version of expat installed on the remote host is prior to 2.1.0-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1764 advisory. A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences for example, from start tag names to the XML...

Moderate Photon OS Security Update - PHSA-2022-3.0-0369

Updates of 'expat' packages of Photon OS have been released...

Master_Librarian - A Simple Tool To Audit Unix/*BSD/Linux System Libraries To Find Public Security Vulnerabilities

A simple tool to audit Unix/BSD/Linux system libraries to find public security vulnerabilities. To install requirements: $ sudo python3 -m pip install -r requirements.txt Overview: vulnerabilities on local libraries by CoolerVoid Example: $ python3 masterlibrarian.py -t csv $ python3...

CVE-2022-25314 affecting package expat 2.4.4-1

CVE-2022-25314 affecting package expat 2.4.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-25235 affecting package expat 2.4.4-1

CVE-2022-25235 affecting package expat 2.4.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-25236 affecting package expat 2.4.4-1

CVE-2022-25236 affecting package expat 2.4.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-25313 affecting package expat 2.4.4-1

CVE-2022-25313 affecting package expat 2.4.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-25315 affecting package expat 2.4.4-1

CVE-2022-25315 affecting package expat 2.4.4-1. An upgraded version of the package is available that resolves this issue...

Medium: expat

Issue Overview: expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to...

Medium: expat

Issue Overview: expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to...

Important: expat, thunderbird

Issue Overview: An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution. CVE-2022-25315...

Important: expat

Issue Overview: An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution. CVE-2022-25315...

Amazon Linux AMI : expat (ALAS-2022-1570)

The version of expat installed on the remote host is prior to 2.1.0-12.26. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1570 advisory. An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow...

Amazon Linux 2 : expat (ALAS-2022-1759)

The version of expat installed on the remote host is prior to 2.1.0-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1759 advisory. An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocation...

Debian: Security Advisory (DLA-2935-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2935-1] expat security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2935-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 07, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2935-1 : expat - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2935 advisory. - Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES. CVE-2022-23852 - xmltokimpl.c i...