Lucene search
K

7 matches found

OSV
OSV
added 2023/08/06 11:5 a.m.3 views

OESA-2023-1464 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few...

9CVSS7AI score0.04193EPSS
Exploits3References6
RedHat Linux
RedHat Linux
added 2022/03/28 12:1 p.m.4 views

expat: Integer overflow in storeAtts in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

8.8CVSS7.5AI score0.00279EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2022/03/16 4:21 p.m.1 views

expat: Integer overflow in storeAtts in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

8.8CVSS7.5AI score0.00279EPSS
Exploits1References5
Veracode
Veracode
added 2022/01/18 10:23 p.m.37 views

Denial Of Service (DoS)

expat is vulnerable to denial-of-service. The vulnerability exists in storeAtts function in xmlparse.c may lead to realloc misbehavior, allowing a malicious user to cause an application crash...

8.8CVSS2.8AI score0.00316EPSS
Exploits1References14Affected Software23
Positive Technologies
Positive Technologies
added 2022/01/08 12:0 a.m.4 views

PT-2022-1760 · Expat +12 · Expat +12

Name of the Vulnerable Software and Affected Versions: Expat aka libexpat versions prior to 2.4.3 Description: The issue is related to an integer overflow in the storeAtts function in xmlparse.c of the Expat library. This could allow a remote attacker to execute arbitrary code. Recommendations: F...

9.8CVSS8.3AI score0.11027EPSS
Exploits11References257
OSV
OSV
added 2022/01/01 7:15 p.m.0 views

UBUNTU-CVE-2021-45960

In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...

8.8CVSS6.9AI score0.00316EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2022/01/01 6:47 p.m.9 views

CVE-2021-45960

In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...

8.7AI score0.00316EPSS
Exploits1References9
Rows per page
Query Builder