3914 matches found
Denial Of Service (DoS)
expat is vulnerable to denial-of-service. The vulnerability exists in storeAtts function in xmlparse.c may lead to realloc misbehavior, allowing a malicious user to cause an application crash...
OESA-2022-1490 expat security update
An XML parser library. Security Fixes: In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory.CVE-2021-45960 lookup in xmlparse.c in Expat aka libexpat...
Vulnerabilities fixed in Expat
Developers have fixed vulnerabilities in Expat. The vulnerabilities allow a remote malicious person to perform a Denial-of-Service. To do this, the malicious party must send an XML tag with an overflow of attributes to the vulnerable XML server send or trigger an integer overflow on various...
[slackware-security] expat
New expat packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/expat-2.4.3-i586-1slack14.2.txz: Upgraded. Fix issues with left shifts by =29 places resulting in: a realloc acting as fre...
Slackware Linux 14.0 / 14.1 / 14.2 / current expat Multiple Vulnerabilities (SSA:2022-016-01)
The version of expat installed on the remote host is prior to 2.4.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-016-01 advisory. - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to...
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3 an integer overflow exists for m_groupSize.
...
nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
Expat addBinding function buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in the addBinding in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary...
Expat build_model function buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in buildmodel in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code ...
Expat defineAttribute function buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in defineAttribute in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary...
Expat nextScaffoldPart buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in xmlparse.c in nextScaffoldPart when processing untrusted input. A remote attacker could exploit this vulnerability to execute arbitra...
Expat storeAtt function buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. libexpat is a streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in storeAtts in xmlparse.c when processing untrusted input. A remote attacker could...
Expat lookup function buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in xmlparse.c in lookup when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on t...
