Lucene search
K

16 matches found

Veracode
Veracode
added 2024/11/29 3:25 a.m.2 views

Denial Of Service (DoS)

libexpat.so is vulnerable to Denial Of Service DoS. The vulnerability is due to the improper implementation of the XMLResumeParser function, allowing XMLStopParser to stop or suspend an unstarted parser...

5.9CVSS5.8AI score0.00127EPSS
Exploits0References6Affected Software3
Veracode
Veracode
added 2024/09/02 2:22 p.m.11 views

Denial Of Service (DOS)

libexpat.so is vulnerable to Denial Of Service DOS. The vulnerability is caused due to a defect within xmlparse.c that does not eject a negative length for XMLParseBuffer...

9.8CVSS9.4AI score0.00613EPSS
Exploits0References4Affected Software4
Veracode
Veracode
added 2022/10/25 5:3 a.m.28 views

Use After Free

libexpat.so is vulnerable to use-after-free. The vulnerability exists due to a lack of entity value validations in the XMLParserFree parameter of the parserCreate function in xmlparse.c. An attacker could exploit it to lead to memory consumption resulting in an application crash...

7.5CVSS7.5AI score0.00393EPSS
Exploits1References23Affected Software8
Veracode
Veracode
added 2022/09/15 8:37 a.m.47 views

Use-After-Free

libexpat.so is vulnerable to use-after-free. The vulnerability is possible because the raw names will be pointing into the stored entity value instead of the parse buffer in doContent method of the file xmlparse.c, which doesn't release the consumed memory...

8.1CVSS8.2AI score0.00941EPSS
Exploits0References18Affected Software8
Veracode
Veracode
added 2022/02/22 10:14 a.m.25 views

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. The vulnerability exists due to the heap overflow in the resolvejobrules function of solver.c, allowing an attacker to cause an application crash...

2.2AI score
Exploits0References4Affected Software2
Veracode
Veracode
added 2022/02/20 10:20 p.m.32 views

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. An attacker can trigger stack exhaustion in the buildmodel function of xmlparse.c via a large nesting depth in the DTD element, leading to an application crash...

6.5CVSS2.7AI score0.00155EPSS
Exploits0References15Affected Software21
Veracode
Veracode
added 2022/02/20 10:19 p.m.31 views

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. The vulnerability exists due to the integer overflow in the copyString function of xmlparse.c as it is only used for encoding strings supplied by the library user, allowing an attacker to cause an application crash...

7.5CVSS4.2AI score0.00508EPSS
Exploits0References14Affected Software21
Veracode
Veracode
added 2022/02/17 8:28 a.m.67 views

Cross-Site Scripting (XSS)

libexpat.so is vulnerable to cross-site scripting. The vulnerability exists in CHECKNAMECASE and CHECKNMSTRTCASES functions of xmltokimpl.c because the conditions are not properly validated which allows an attacker to inject and execute javascript...

9.8CVSS2.6AI score0.11027EPSS
Exploits0References15Affected Software23
Veracode
Veracode
added 2022/01/27 3:56 a.m.32 views

Integer Overflow

libexpat.so is vulnerable to integer overflow. The vulnerability exists in the doProlog function in the xmlparse.c file, allowing an attacker to cause an application crash...

7.5CVSS4AI score0.037EPSS
Exploits0References11Affected Software22
Veracode
Veracode
added 2022/01/11 9:49 a.m.28 views

Integer Overflow

libexpat.so is vulnerable to denial of serviceDOS attacks. The vulnerability exists due to the integer overflow in the addBinding of xmlparse.c, allowing an attacker to cause an application crash...

9.8CVSS4.3AI score0.01329EPSS
Exploits1References7Affected Software23
Veracode
Veracode
added 2022/01/11 6:52 a.m.30 views

Integer Overflow

libexpat.so is vulnerable to Integer Overflow. The vulnerability exists because the defineAttribute function of xmlparse.c doesn't check the input length which allows an attacker to leverage an overflow causing an application crash...

9.8CVSS9.4AI score0.00431EPSS
Exploits0References8Affected Software23
Veracode
Veracode
added 2022/01/11 6:14 a.m.28 views

Integer Overflow

libexpat.so is vulnerable to Integer Overflow. The vulnerability exists in the nextScaffoldPart function in the xmlparse.c' file, allowing an attacker to cause an application crash...

8.8CVSS3.9AI score0.00206EPSS
Exploits0References9Affected Software23
Veracode
Veracode
added 2022/01/11 3:52 a.m.32 views

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. The vulnerability exists due to the integer overflow in the lookup of xmlparse.c, allowing an attacker to cause an application crash...

8.8CVSS3.6AI score0.00206EPSS
Exploits0References7Affected Software23
Veracode
Veracode
added 2022/01/11 3:19 a.m.26 views

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. The vulnerability exists due to the integer overflow in the buildmodel of xmlparse.c, allowing an attacker to cause an application crash...

9.8CVSS3.9AI score0.00431EPSS
Exploits0References7Affected Software23
Veracode
Veracode
added 2022/01/07 6:5 a.m.40 views

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. The vulnerability exists due to the integer overflow in the mgroupSize of xmlparse.c, allowing an attacker to cause an application crash...

8.1CVSS3.9AI score0.04193EPSS
Exploits1References10Affected Software23
Veracode
Veracode
added 2019/09/05 6:48 a.m.37 views

Denial Of Service (Dos)

libexpat.so is vulnerable to denial of service. A heap-based buffer overflow occurs when an attacker sends a malicious XML which switches the DTD parsing to document parsing immaturely, leading to repeated calls of XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber function that results in an...

7.5CVSS3.9AI score0.00203EPSS
Exploits1References62Affected Software13
Rows per page
Query Builder