Lucene search
K

8 matches found

OSV
OSV
added 2023/08/06 11:5 a.m.5 views

OESA-2023-1464 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few...

9CVSS7AI score0.042EPSS
Exploits2References6
RedHat Linux
RedHat Linux
added 2022/03/28 12:1 p.m.5 views

expat: Integer overflow in storeAtts in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

8.8CVSS7.5AI score0.02778EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2022/03/16 4:21 p.m.2 views

expat: Integer overflow in storeAtts in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

8.8CVSS7.5AI score0.02778EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/02/28 12:0 a.m.7 views

The vulnerability of the storeAtts() function in the Expat library allows a hacker to trigger a service failure.

The vulnerability of the storeAtts function in the Expat library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

9CVSS7.7AI score0.042EPSS
Exploits1References22Affected Software10
Veracode
Veracode
added 2022/01/18 10:23 p.m.38 views

Denial Of Service (DoS)

expat is vulnerable to denial-of-service. The vulnerability exists in storeAtts function in xmlparse.c may lead to realloc misbehavior, allowing a malicious user to cause an application crash...

8.8CVSS2.8AI score0.042EPSS
Exploits1References14Affected Software23
Positive Technologies
Positive Technologies
added 2022/01/08 12:0 a.m.4 views

PT-2022-1760 · Expat +12 · Expat +12

Name of the Vulnerable Software and Affected Versions: Expat aka libexpat versions prior to 2.4.3 Description: The issue is related to an integer overflow in the storeAtts function in xmlparse.c of the Expat library. This could allow a remote attacker to execute arbitrary code. Recommendations: F...

9.8CVSS8.3AI score0.33936EPSS
Exploits10References257
OSV
OSV
added 2022/01/01 7:15 p.m.1 views

UBUNTU-CVE-2021-45960

In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...

8.8CVSS6.9AI score0.042EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2022/01/01 6:47 p.m.9 views

CVE-2021-45960

In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...

8.7AI score0.042EPSS
Exploits1References9
Rows per page
Query Builder