4098 matches found
Important Photon OS Security Update - PHSA-2022-3.0-0354
Updates of 'aide', 'ImageMagick', 'expat', 'ruby' packages of Photon OS have been released...
[SECURITY] Fedora 35 Update: expat-2.4.3-1.fc35
This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...
Critical Photon OS Security Update - PHSA-2022-0353
Updates of 'expat', 'cryptsetup' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-0354
Updates of 'expat', 'ruby', 'aide', 'ImageMagick' packages of Photon OS have been released...
Denial Of Service (DoS)
expat is vulnerable to denial-of-service. The vulnerability exists in storeAtts function in xmlparse.c may lead to realloc misbehavior, allowing a malicious user to cause an application crash...
OESA-2022-1490 expat security update
An XML parser library. Security Fixes: In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory.CVE-2021-45960 lookup in xmlparse.c in Expat aka libexpat...
Vulnerabilities fixed in Expat
Developers have fixed vulnerabilities in Expat. The vulnerabilities allow a remote malicious person to perform a Denial-of-Service. To do this, the malicious party must send an XML tag with an overflow of attributes to the vulnerable XML server send or trigger an integer overflow on various...
[slackware-security] expat
New expat packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/expat-2.4.3-i586-1slack14.2.txz: Upgraded. Fix issues with left shifts by =29 places resulting in: a realloc acting as fre...
Slackware Linux 14.0 / 14.1 / 14.2 / current expat Multiple Vulnerabilities (SSA:2022-016-01)
The version of expat installed on the remote host is prior to 2.4.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-016-01 advisory. - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to...
nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3 an integer overflow exists for m_groupSize.
...
storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
Expat lookup function buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in xmlparse.c in lookup when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on t...
Expat build_model function buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in buildmodel in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code ...
Expat nextScaffoldPart buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in xmlparse.c in nextScaffoldPart when processing untrusted input. A remote attacker could exploit this vulnerability to execute arbitra...
Expat defineAttribute function buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in defineAttribute in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary...