CVE-2022-25235 affecting package expat 2.4.4-1

CVE-2022-25235 affecting package expat 2.4.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-25236 affecting package expat 2.4.4-1

CVE-2022-25236 affecting package expat 2.4.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-25314 affecting package expat 2.4.4-1

CVE-2022-25314 affecting package expat 2.4.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-25313 affecting package expat 2.4.4-1

CVE-2022-25313 affecting package expat 2.4.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-25315 affecting package expat 2.4.4-1

CVE-2022-25315 affecting package expat 2.4.4-1. An upgraded version of the package is available that resolves this issue...

Amazon Linux 2 : expat (ALAS-2022-1759)

The version of expat installed on the remote host is prior to 2.1.0-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1759 advisory. An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocation...

Amazon Linux AMI : expat (ALAS-2022-1570)

The version of expat installed on the remote host is prior to 2.1.0-12.26. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1570 advisory. An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow...

Medium: expat

Issue Overview: expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to...

Important: expat

Issue Overview: An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution. CVE-2022-25315...

Important: expat, thunderbird

Issue Overview: An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution. CVE-2022-25315...

Medium: expat

Issue Overview: expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to...

Debian: Security Advisory (DLA-2935-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2935-1] expat security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2935-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 07, 2022 https://wiki.debian.org/LTS -...

DLA-2935-1 expat - security update

Bulletin has no description...

Debian DLA-2935-1 : expat - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2935 advisory. - Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES. CVE-2022-23852 - xmltokimpl.c i...

SUSE SLES12 Security Update : expat (SUSE-SU-2022:0698-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0698-1 advisory. - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs bsc1196025. - CVE-2022-25235: Fixed...

SUSE: Security Advisory (SUSE-SU-2022:14903-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : expat (SUSE-SU-2022:14903-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:14903-1 advisory. - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs bsc1196025. - CVE-2022-25235: Fixed UTF-8...

SUSE SLED15 / SLES15 Security Update : expat (SUSE-SU-2022:0713-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0713-1 advisory. - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs bsc1196025. -...

openSUSE: Security Advisory for expat (openSUSE-SU-2022:0713-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...