4125 matches found
CVE-2022-23852
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
CVE-2022-23852
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
CVE-2022-23852
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
Critical Photon OS Security Update - PHSA-2022-0431
Updates of 'expat' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2022-0145
Updates of 'systemd', 'linux-aws', 'linux-secure', 'aide', 'ImageMagick', 'linux-rt', 'linux', 'expat', 'linux-esx', 'cryptsetup', 'wireshark' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2022-0462
Updates of 'expat' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-3.0-0354
Updates of 'aide', 'ImageMagick', 'expat', 'ruby' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2022-4.0-0145
Updates of 'cryptsetup', 'linux-esx', 'expat', 'wireshark', 'linux-aws', 'systemd', 'aide', 'ImageMagick', 'linux', 'linux-secure', 'linux-rt' packages of Photon OS have been released...
[SECURITY] Fedora 35 Update: expat-2.4.3-1.fc35
This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...
Critical Photon OS Security Update - PHSA-2022-0353
Updates of 'expat', 'cryptsetup' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-0354
Updates of 'expat', 'ruby', 'aide', 'ImageMagick' packages of Photon OS have been released...
Denial Of Service (DoS)
expat is vulnerable to denial-of-service. The vulnerability exists in storeAtts function in xmlparse.c may lead to realloc misbehavior, allowing a malicious user to cause an application crash...
OESA-2022-1490 expat security update
An XML parser library. Security Fixes: In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory.CVE-2021-45960 lookup in xmlparse.c in Expat aka libexpat...
Vulnerabilities fixed in Expat
Developers have fixed vulnerabilities in Expat. The vulnerabilities allow a remote malicious person to perform a Denial-of-Service. To do this, the malicious party must send an XML tag with an overflow of attributes to the vulnerable XML server send or trigger an integer overflow on various...
[slackware-security] expat
New expat packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/expat-2.4.3-i586-1slack14.2.txz: Upgraded. Fix issues with left shifts by =29 places resulting in: a realloc acting as fre...
Slackware Linux 14.0 / 14.1 / 14.2 / current expat Multiple Vulnerabilities (SSA:2022-016-01)
The version of expat installed on the remote host is prior to 2.4.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-016-01 advisory. - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to...
nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...