libexpat.so is vulnerable to integer overflow. The vulnerability exists in the doProlog function in the xmlparse.c file, allowing an attacker to cause an application crash.

References

cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf

github.com/libexpat/libexpat/commit/5c168279c5ad4668e5e48fe13374fe7a7de4b573

github.com/libexpat/libexpat/pull/551

lists.fedoraproject.org/archives/list/[email protected]/message/34NXVL2RZC2YZRV74ZQ3RNFB7WCEUP7D/

lists.fedoraproject.org/archives/list/[email protected]/message/R7FF2UH7MPXKTADYSJUAHI2Y5UHBSHUH/

security.gentoo.org/glsa/202209-24

www.debian.org/security/2022/dsa-5073

www.oracle.com/security-alerts/cpuapr2022.html

www.tenable.com/security/tns-2022-05

ubuntucve 1

slackware 1

osv 7

fedora 2

nessus 45

redhatcve 1

prion 1

cve 1

cnvd 1

cbl_mariner 2

cvelist 1

debiancve 1

amazon 2

openvas 32

nvd 1

oraclelinux 2

githubexploit 2

rocky 1

alpinelinux 1

ibm 19

suse 1

mageia 1

redos 1

photon 6

redhat 2

almalinux 1

malwarebytes 1

debian 2

ubuntu 1

cloudfoundry 1

cloudlinux 1

ics 3

aix 1

gentoo 1

oracle 3

avleonov 1

ubuntucve

CVE-2022-23990

2022-01-26 00:00:00

slackware

[slackware-security] expat

2022-01-27 22:58:35

osv

Vulnerability: external/expat (doProlog)

2022-09-01 00:00:00

CVE-2022-23990

2022-01-26 19:15:08

expat-2.4.4-1.1 on GA media

2024-06-15 00:00:00

fedora

[SECURITY] Fedora 35 Update: mingw-expat-2.4.4-1.fc35

2022-02-12 01:20:38

[SECURITY] Fedora 34 Update: mingw-expat-2.4.4-1.fc34

2022-02-12 01:16:47

nessus

Rocky Linux 8 : mingw-expat (RLSA-2022:7811)

2023-01-30 00:00:00

Oracle Linux 8 : expat (ELSA-2022-9232)

2022-03-18 00:00:00

Amazon Linux AMI : expat (ALAS-2023-1882)

2023-11-03 00:00:00

redhatcve

CVE-2022-23990

2022-01-31 04:59:08

prion

Integer overflow

2022-01-26 19:15:00

cve

CVE-2022-23990

2022-01-26 19:15:08

cnvd

Expat integer overflow vulnerability

2022-01-28 00:00:00

cbl_mariner

CVE-2022-23990 affecting package expat for versions less than 2.4.8-1

2022-04-26 20:17:03

CVE-2022-23990 affecting package expat 2.4.3-1

2022-02-25 01:45:35

cvelist

CVE-2022-23990

2022-01-26 18:02:02

debiancve

CVE-2022-23990

2022-01-26 19:15:08

amazon

Medium: expat

2023-10-30 23:31:00

Medium: expat

2023-09-27 22:49:00

openvas

Fedora: Security Advisory for mingw-expat (FEDORA-2022-88f6a3d290)

2022-02-12 00:00:00

Slackware: Security Advisory (SSA:2022-027-01)

2022-04-21 00:00:00

Fedora: Security Advisory for mingw-expat (FEDORA-2022-d2abd0858e)

2022-02-12 00:00:00

nvd

CVE-2022-23990

2022-01-26 19:15:08

oraclelinux

expat security update

2022-03-18 00:00:00

expat security update

2022-03-16 00:00:00

githubexploit

Exploit for Integer Overflow or Wraparound in Libexpat Project Libexpat

2022-04-27 11:46:00

Exploit for Integer Overflow or Wraparound in Libexpat Project Libexpat

2022-04-28 05:39:11

rocky

mingw-expat security update

2023-01-30 05:21:15

alpinelinux

CVE-2022-23990

2022-01-26 19:15:08

ibm

Security Bulletin: Due to use of Expat, IBM Tivoli Network Manager is vulnerable to arbiraty code execution (CVE-2022-23990 and CVE-2022-23852)

2022-07-21 04:24:34

Security Bulletin: Vulnerabilities in Expat (AKA libexpat) affect IBM Storage Protect for Virtual Environments: Data Protection for VMware (CVE-2022-23852, CVE-2022-23990)

2023-10-11 14:40:42

Security Bulletin: IBM® Db2® is affected by multiple vulnerabilities in the included Expat 3rd party library (CVE-2022-23852 and CVE-2022-23990)

2022-04-20 14:28:59

suse

Security update for expat (important)

2022-02-18 00:00:00

mageia

Updated expat packages fix security vulnerability

2022-02-03 23:29:44

redos

ROS-20220330-02

2022-03-30 00:00:00

photon

Critical Photon OS Security Update - PHSA-2022-0437

2022-02-04 00:00:00

Critical Photon OS Security Update - PHSA-2022-0467

2022-02-04 00:00:00

Critical Photon OS Security Update - PHSA-2022-0358

2022-02-07 00:00:00

redhat

(RHSA-2022:7811) Important: mingw-expat security update

2022-11-08 06:30:08

(RHSA-2022:7144) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update

2022-10-26 20:04:31

almalinux

Important: mingw-expat security update

2022-11-08 00:00:00

malwarebytes

Oracle releases massive Critical Patch Update containing 520 security patches

2022-04-20 14:53:54

debian

[SECURITY] [DLA 2904-1] expat security update

2022-01-30 21:42:20

[SECURITY] [DSA 5073-1] expat security update

2022-02-12 13:32:08

ubuntu

Expat vulnerabilities

2022-02-21 00:00:00

cloudfoundry

USN-5288-1: Expat vulnerabilities | Cloud Foundry

2022-04-21 00:00:00

cloudlinux

Fixed 13 CVEs in expat

2022-08-17 18:50:48

ics

Hitachi Energy AFS65x, AFF66x, AFS67x, and AFR67x Series Products

2023-10-05 12:00:00

Siemens SINEMA Remote Connect Server

2022-06-16 12:00:00

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

2023-12-14 12:00:00

aix

AIX is affected by multiple vulnerabilities in Python

2022-07-28 13:12:18

gentoo

Expat: Multiple Vulnerabilities

2022-09-29 00:00:00

oracle

Oracle Critical Patch Update Advisory - October 2023

2023-10-17 00:00:00

Oracle Critical Patch Update Advisory - October 2022

2022-10-18 00:00:00

Oracle Critical Patch Update Advisory - April 2022

2022-04-19 00:00:00

avleonov

Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs

2022-12-30 18:03:13

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

EPSS

0.01

Percentile

84.1%

JSON

Related for VERACODE:33920