1341 matches found
AlmaLinux 8 : firefox (ALSA-2022:7024)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2022:7024 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Nessus has not tested for this issue but has instead...
SUSE SLED15: expat / libexpat-devel / libexpat-devel-32bit / libexpat1 / etc (SUSE-SU-2022:3597-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3597-1 advisory. - CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c bsc1203438. Tenable has...
Slackware Linux 15.0 / current python3 Vulnerability (SSA:2022-286-01)
The version of python3 installed on the remote host is prior to 3.9.15. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-286-01 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Nessus has not tested...
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2022-2495)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.6.0 : expat (EulerOS-SA-2022-2555)
According to the versions of the expat packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc...
Oracle Linux 7 : expat (ELSA-2022-6834)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6834 advisory. - lib: Prevent integer overflow in doProlog CVE-2022-23990Orabug: 33910302 Tenable has extracted the preceding description block directly from the Oracle Linux...
MGASA-2022-0352 Updated expat packages fix security vulnerability
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674...
Updated expat packages fix security vulnerability
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674...
Vulnerability fixed in Expat
A vulnerability has been fixed in Expat. A malicious person can cause a use-after-free in libexpat via the doContent function in xmlparse.c. Misuse of the vulnerability potentially results in the following categories of damage: Denial-of-Service DoS. Manipulation of data Remote code execution Use...
SUSE SLES12 Security Update : expat (SUSE-SU-2022:3466-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3466-1 advisory. - CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c bsc1203438. Tenable has extracted the preceding description...
GLSA-202209-24 : Expat: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202209-24 Expat: Multiple Vulnerabilities - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only...
Python -- multiple vulnerabilities
Python reports: gh-100001: python -m http.server no longer allows terminal control characters sent within a garbage request to be printed to the stderr server log. This is done by changing the http.server BaseHTTPRequestHandler .logmessage method to replace control characters with a \xHH hex esca...
Ubuntu 16.04 ESM : Expat vulnerability (USN-5638-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5638-1 advisory. Rhodri James discovered that Expat incorrectly handled memory when processing certain malformed XML files. An attacker could possibly use this issue to cause a...
Debian dla-3119 : expat - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3119 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3119-1 [email protected] https://www.debian.org/lts/security/...
OESA-2022-1932 expat security update
Security Fixes: libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.CVE-2022-40674...
Debian DSA-5236-1 : expat - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5236 advisory. Rhodri James discovered a heap use-after-free vulnerability in the doContent function in Expat, an XML parsing C library, which could result in denial of service or...
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
...
CVE-2022-40674
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...
