GLSA-202209-24 : Expat: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202209-24 Expat: Multiple Vulnerabilities - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only...

Python -- multiple vulnerabilities

Python reports: gh-100001: python -m http.server no longer allows terminal control characters sent within a garbage request to be printed to the stderr server log. This is done by changing the http.server BaseHTTPRequestHandler .logmessage method to replace control characters with a \xHH hex esca...

Ubuntu 16.04 ESM : Expat vulnerability (USN-5638-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5638-1 advisory. Rhodri James discovered that Expat incorrectly handled memory when processing certain malformed XML files. An attacker could possibly use this issue to cause a...

Debian dla-3119 : expat - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3119 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3119-1 [email protected] https://www.debian.org/lts/security/...

OESA-2022-1932 expat security update

Security Fixes: libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.CVE-2022-40674...

Debian DSA-5236-1 : expat - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5236 advisory. Rhodri James discovered a heap use-after-free vulnerability in the doContent function in Expat, an XML parsing C library, which could result in denial of service or...

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

...

CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

ALPINE-CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

Design/Logic Flaw

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

libexpat 资源管理错误漏洞

libexpat is a streaming XML parser written in C. It has a vulnerability in its xmlparse.c component that stems from a post-release reuse of the doContent function. A security vulnerability exists in versions of libexpat prior to 2.4.9, which stems from post-release reuse of the doContent function...

CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

CVE-2022-40674

CVE-2022-40674 affects libexpat (expat) prior to 2.4.9, with a use-after-free in the doContent function of xmlparse.c. The connected advisories confirm this weakness can lead to denial of service or potentially arbitrary code execution via memory corruption, depending on how the parser handles in...

CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

ASB-A-221384482

from https://nvd.nist.gov/vuln/detail/CVE-2022-25314 In Expat aka libexpat before 2.4.5, there is an integer overflow in copyString. In copyString of xmlparse.c, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.1)

The version of AOS installed on the remote host is prior to 5.19.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19.1 advisory. - In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20201105.1021)

The version of AHV installed on the remote host is prior to 20201105.1021. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20201105.1021 advisory. - In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In...