Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Use-After-Free

🗓️ 15 Sep 2022 08:37:15Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 49 Views

libexpat.so use-after-free vulnerability in xmlparse.c metho

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Due to use of Expat library, IBM Tivoli Network Manager (ITNM) is vulnerable to arbitrary code execution [CVE-2022-40674]
16 Jan 202316:43
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server and IBM HTTP Server used by WebSphere Application Server
30 Dec 202217:56
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server affect IBM Business Automation Workflow (CVE-2022-40674)
21 Oct 202206:57
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in Expat component shipped with IBM Rational ClearCase [CVE-2022-40674, CVE-2022-43680]
31 Jan 202314:01
–ibm
IBM Security Bulletins		Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Expat, SQlite, libxml2, Libksba, zlib and GnuTLS
30 Nov 202208:48
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.
6 Jan 202321:23
–ibm
IBM Security Bulletins		Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.
11 Apr 202311:47
–ibm
IBM Security Bulletins		Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2022-40674)
27 Oct 202219:18
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Security vulnerabilities fixed and shipped with IBM Security Verify Bridge (Docker version) (CVE-2022-2175, CVE-2022-2526, CVE-2022-40674, CVE-2022-3515)
7 Mar 202319:58
–ibm
IBM Security Bulletins		Security Bulletin: IBM QRadar SIEM includes multiple components with known vulnerabilities
13 Feb 202313:10
–ibm
Rows per page
Vulners
Node
OR
AND
expatexpatMatch2.4.1-2debian
expatexpatMatch2.2.10-1debian
debiandebian_linuxMatch999
AND
expatexpatMatch2.4.5-r0cpp
expatexpatMatch2.2.10-r1cpp
expatexpatMatch2.4.8-r1cpp
expatexpatMatch2.4.7-r0cpp
expatexpatMatch2.4.1-r0cpp
expatexpatMatch2.3.0-r0cpp
expatexpatMatch2.4.2-r0cpp
expatexpatMatch2.2.9-r1cpp
expatexpatMatch2.4.3-r0cpp
expatexpatMatch2.4.8-r0cpp
expatexpatMatch2.4.4-r0cpp
expatexpatMatch2.4.6-r0cpp
alpinelinuxalpine_linuxMatchedge
AND
expatexpatMatch2.2.10-r2cpp
expatexpatMatch2.2.10-r6cpp
expatexpatMatch2.2.10-r4cpp
expatexpatMatch2.2.10-r1cpp
expatexpatMatch2.2.10-r5cpp
alpinelinuxalpine_linuxMatch3.13
AND
expatexpatMatch2.4.8-r0cpp
alpinelinuxalpine_linuxMatch3.16
AND
expatexpatMatch2.4.7-r0cpp
expatexpatMatch2.4.6-r0cpp
expatexpatMatch2.4.5-r0cpp
expatexpatMatch2.4.3-r0cpp
expatexpatMatch2.4.4-r0cpp
expatexpatMatch2.3.0-r0cpp
expatexpatMatch2.4.1-r0cpp
alpinelinuxalpine_linuxMatch3.14
AND
expatexpatMatch2.4.1-r0cpp
expatexpatMatch2.4.4-r0cpp
expatexpatMatch2.4.6-r0cpp
expatexpatMatch2.4.7-r0cpp
expatexpatMatch2.4.5-r0cpp
expatexpatMatch2.4.3-r0cpp
alpinelinuxalpine_linuxMatch3.15
AND
expatexpatMatch2.2.6-2+deb10u1debian
debiandebian_linuxMatch10
AND
expatexpatMatch2.2.10-1debian
debiandebian_linuxMatch11
AND
googlebionicMatch80.0.1+build1-0ubuntu0.18.04.1debian
googlebionicMatch59.0.2+build1-0ubuntu1debian
googlebionicMatch80.0+build2-0ubuntu0.18.04.1debian
googlebionicMatch92.0+build3-0ubuntu0.18.04.1debian
googlebionicMatch83.0+build2-0ubuntu0.18.04.2debian
debiandebian_linux
AND
focalfocalMatch75.0+build3-0ubuntu1debian
focalfocalMatch83.0+build2-0ubuntu0.20.04.1debian
focalfocalMatch80.0.1+build1-0ubuntu0.20.04.1debian
focalfocalMatch80.0+build2-0ubuntu0.20.04.1debian
debiandebian_linux
AND
googlebionicMatch2.2.5-3ubuntu0.2debian
debiandebian_linux
AND
focalfocalMatch2.2.9-1build1debian
debiandebian_linux
AND
develdevelMatch2.2.9-1build1debian
develdevelMatch2.2.10-2debian
develdevelMatch2.2.10-1debian
debiandebian_linux
OR
libexpat.solibexpat.soRange0.4.0.debug–1.8.8cpp
mozillathunderbirdMatch60.4.0_1.el7.centos
mozillathunderbirdMatch91.10.0_1.el7.centos
mozillathunderbirdMatch68.9.0_1.el7.centos
mozillathunderbirdMatch91.9.0_3.el7.centos.plus
mozillathunderbirdMatch78.9.1_1.el8
mozillathunderbirdMatch38.2.0_1.ael7b_1
mozillathunderbirdMatch60.3.0_1.el7.centos
mozillathunderbirdMatch91.12.0_1.el7.centos.plus
mozillathunderbirdMatch78.9.0_3.el7.centos
mozillathunderbirdMatch91.11.0_2.el7.centos
mozillathunderbirdMatch78.6.0_1.el7.centos
mozillathunderbirdMatch68.4.1_2.el7.centos
mozillathunderbirdMatch91.4.0_3.el7.centos
mozillathunderbirdMatch68.5.0_1.el7.centos
mozillathunderbirdMatch91.13.0_1.el7.centos
mozillathunderbirdMatch78.13.0_1.el7.centos
mozillathunderbirdMatch91.2.0_1.el8s
mozillathunderbirdMatch91.4.0_2.el8
mozillathunderbirdMatch91.6.0_1.el7.centos.plus
mozillathunderbirdMatch78.7.0_1.el7.centos.plus
mozillathunderbirdMatch91.9.0_3.el8s
mozillathunderbirdMatch78.13.0_1.el8
mozillathunderbirdMatch91.7.0_2.el7.centos.plus
mozillathunderbirdMatch78.6.1_1.el7.centos
mozillathunderbirdMatch91.3.0_2.el7.centos.plus
mozillathunderbirdMatch68.11.0_1.el7.centos
mozillathunderbirdMatch91.6.0_1.el8s
mozillathunderbirdMatch78.12.0_1.el8
mozillathunderbirdMatch78.9.1_1.el7.centos
mozillathunderbirdMatch68.3.0_1.el7.centos
mozillathunderbirdMatch91.10.0_1.el7.centos.plus
mozillathunderbirdMatch68.12.0_1.el7.centos
mozillathunderbirdMatch78.7.0_1.el8
mozillathunderbirdMatch91.9.1_1.el8s
mozillathunderbirdMatch91.13.0_1.el7.centos.plus
mozillathunderbirdMatch31.7.0_1.ael7b_1
mozillathunderbirdMatch91.7.0_2.el7.centos
mozillathunderbirdMatch91.12.0_1.el7.centos
mozillathunderbirdMatch60.7.2_2.el7.centos
mozillathunderbirdMatch68.6.0_1.el7.centos
mozillathunderbirdMatch60.9.0_1.el7.centos
mozillathunderbirdMatch78.4.0_1.el7.centos
mozillathunderbirdMatch91.3.0_2.el8
mozillathunderbirdMatch60.5.0_1.el8
mozillathunderbirdMatch91.12.0_1.el8s
mozillathunderbirdMatch60.7.0_1.el7.centos
mozillathunderbirdMatch91.2.0_1.el7.centos
mozillathunderbirdMatch78.12.0_3.el8
mozillathunderbirdMatch78.10.0_1.el7.centos.plus
mozillathunderbirdMatch31.6.0_1.ael7b_1
mozillathunderbirdMatch60.8.0_1.el7.centos
mozillathunderbirdMatch52.9.1_1.el7.centos
mozillathunderbirdMatch78.9.1_1.el7.centos.plus
mozillathunderbirdMatch78.6.1_1.el7.centos.plus
mozillathunderbirdMatch68.8.0_1.el7.centos
mozillathunderbirdMatch91.5.0_1.el8s
mozillathunderbirdMatch60.5.0_1.el7.centos
mozillathunderbirdMatch78.10.0_1.el7.centos
mozillathunderbirdMatch68.2.0_1.el7.centos
mozillathunderbirdMatch91.2.0_1.el7.centos.plus
mozillathunderbirdMatch60.6.1_1.el7.centos
mozillathunderbirdMatch91.8.0_1.el8s
mozillathunderbirdMatch38.3.0_1.ael7b_1
mozillathunderbirdMatch78.9.0_3.el7.centos.plus
mozillathunderbirdMatch78.11.0_1.0.1.el8
mozillathunderbirdMatch78.14.0_1.el7.centos.plus
mozillathunderbirdMatch78.7.0_1.el7.centos
mozillathunderbirdMatch91.13.0_1.el8s
mozillathunderbirdMatch78.8.0_1.el7.centos
mozillathunderbirdMatch91.11.0_2.el7.centos.plus
mozillathunderbirdMatch91.6.0_1.el7.centos
mozillathunderbirdMatch78.8.0_1.el7.centos.plus
mozillathunderbirdMatch78.6.1_1.el8
mozillathunderbirdMatch91.2.0_1.el8
mozillathunderbirdMatch91.8.0_1.el7.centos
mozillathunderbirdMatch91.4.0_3.el7.centos.plus
mozillathunderbirdMatch78.11.0_1.el8
mozillathunderbirdMatch78.9.0_3.el8
mozillathunderbirdMatch91.4.0_2.el8s
mozillathunderbirdMatch78.12.0_2.el7.centos.plus
mozillathunderbirdMatch78.5.0_1.el7.centos
mozillathunderbirdMatch52.8.0_1.el7.centos
mozillathunderbirdMatch91.9.0_3.el7.centos
mozillathunderbirdMatch68.10.0_1.el7.centos
mozillathunderbirdMatch91.8.0_1.el7.centos.plus
mozillathunderbirdMatch60.8.0_1.el8_0
mozillathunderbirdMatch91.3.0_2.el8s
mozillathunderbirdMatch78.14.0_1.el7.centos
mozillathunderbirdMatch91.11.0_2.el8s
mozillathunderbirdMatch78.12.0_2.el7.centos
mozillathunderbirdMatch91.9.1_1.el7.centos
mozillathunderbirdMatch78.14.0_1.el8s
mozillathunderbirdMatch78.14.0_1.el8
mozillathunderbirdMatch78.13.0_1.el7.centos.plus
mozillathunderbirdMatch91.5.0_1.el7.centos
mozillathunderbirdMatch91.5.0_1.el7.centos.plus
mozillathunderbirdMatch78.11.0_1.el7.centos
mozillathunderbirdMatch68.7.0_1.el7.centos
mozillathunderbirdMatch91.10.0_1.el8s
mozillathunderbirdMatch31.8.0_1.ael7b_1
mozillathunderbirdMatch91.9.1_1.el7.centos.plus
mozillathunderbirdMatch91.3.0_2.el7.centos
mozillathunderbirdMatch91.7.0_2.el8s
mozillathunderbirdMatch78.10.0_1.el8
mozillathunderbirdMatch78.11.0_1.el7.centos.plus
mozillathunderbirdMatch78.8.0_1.el8
compat-expat1compat-expat1Match1.95.8_8.el6
mozillafirefoxMatch31.6.0_2.ael7b_1
mozillafirefoxMatch91.7.0_3.el8
mozillafirefoxMatch60.5.1_1.el7.centos
mozillafirefoxMatch68.3.0_1.el7.centos
mozillafirefoxMatch91.4.0_1.el7.centos
mozillafirefoxMatch91.9.0_1.el8
mozillafirefoxMatch60.5.0_2.el7.centos
mozillafirefoxMatch78.3.0_1.el8_2
mozillafirefoxMatch60.4.0_1.el7.centos
mozillafirefoxMatch78.14.0_1.el8_4
mozillafirefoxMatch68.9.0_1.el8
mozillafirefoxMatch91.8.0_1.el8
mozillafirefoxMatch68.1.0_1.el8_0
mozillafirefoxMatch68.12.0_1.el7.centos
mozillafirefoxMatch78.7.0_2.el7.centos
mozillafirefoxMatch60.2.2_1.el7.centos
mozillafirefoxMatch91.10.0_1.el8
mozillafirefoxMatch78.6.0_1.el7.centos
mozillafirefoxMatch68.3.0_1.el8_1
mozillafirefoxMatch68.6.1_1.el7.centos
mozillafirefoxMatch78.5.0_1.el8_3
mozillafirefoxMatch91.2.0_4.el7.centos
mozillafirefoxMatch78.4.0_1.el8_2
mozillafirefoxMatch38.1.1_1.ael7b_1
mozillafirefoxMatch91.11.0_2.el8
mozillafirefoxMatch52.7.0_1.el7.centos
mozillafirefoxMatch60.4.0_1.el7.centos.0.1
mozillafirefoxMatch68.4.1_1.el8_1
mozillafirefoxMatch68.7.0_2.el7.centos
mozillafirefoxMatch91.5.0_1.el8_5
mozillafirefoxMatch78.5.0_1.el7.centos
mozillafirefoxMatch60.7.2_1.el7.centos
mozillafirefoxMatch60.3.0_1.el7.centos
mozillafirefoxMatch91.9.1_1.el7.centos
mozillafirefoxMatch78.10.0_1.el8_3
mozillafirefoxMatch38.4.0_1.ael7b_1
mozillafirefoxMatch78.9.0_1.el7.centos
mozillafirefoxMatch38.0_3.ael7b_1
mozillafirefoxMatch91.9.0_1.el7.centos
mozillafirefoxMatch60.2.1_1.el7.centos
mozillafirefoxMatch91.12.0_2.el7.centos
mozillafirefoxMatch68.11.0_1.el8_2
mozillafirefoxMatch78.4.0_1.el7.centos
mozillafirefoxMatch78.6.0_1.el8_3
mozillafirefoxMatch91.12.0_2.el8
mozillafirefoxMatch60.8.0_1.el7.centos
mozillafirefoxMatch78.2.0_3.el8
mozillafirefoxMatch60.1.0_4.el7.centos
mozillafirefoxMatch68.2.0_2.el8_0
mozillafirefoxMatch68.6.0_1.el7.centos
mozillafirefoxMatch68.11.0_1.el7.centos
mozillafirefoxMatch78.7.0_2.el8_3
mozillafirefoxMatch68.4.1_1.el7.centos
mozillafirefoxMatch38.0.1_1.ael7b_1
mozillafirefoxMatch68.1.0_2.el7.centos
mozillafirefoxMatch38.2.0_4.ael7b_1
mozillafirefoxMatch91.2.0_4.el8_4
mozillafirefoxMatch78.4.1_1.el7.centos
mozillafirefoxMatch91.3.0_1.el7.centos
mozillafirefoxMatch78.2.0_2.el8_2
mozillafirefoxMatch91.5.0_1.el7.centos
mozillafirefoxMatch78.13.0_2.el8_4
mozillafirefoxMatch68.2.0_1.el7.centos
mozillafirefoxMatch78.12.0_1.el8_4
mozillafirefoxMatch68.9.0_1.el8_2
mozillafirefoxMatch52.7.3_1.el7.centos
mozillafirefoxMatch68.5.0_2.el7.centos
mozillafirefoxMatch38.3.0_2.ael7b_1
mozillafirefoxMatch78.9.0_1.el8_3
mozillafirefoxMatch78.8.0_1.el7.centos
mozillafirefoxMatch91.11.0_2.el7.centos
mozillafirefoxMatch91.3.0_1.el8_4
mozillafirefoxMatch38.2.1_1.ael7b_1
mozillafirefoxMatch31.5.3_3.ael7b_1
mozillafirefoxMatch52.8.0_1.el7.centos
mozillafirefoxMatch68.6.0_1.el8_1
mozillafirefoxMatch78.12.0_1.el7.centos
mozillafirefoxMatch91.2.0_1.el8_4
mozillafirefoxMatch78.3.0_1.el8
mozillafirefoxMatch68.10.0_1.el8_2
mozillafirefoxMatch78.11.0_3.el7.centos
mozillafirefoxMatch68.5.0_2.el8_1
mozillafirefoxMatch60.6.1_1.el8
mozillafirefoxMatch68.9.0_1.el7.centos
mozillafirefoxMatch91.6.0_1.el7.centos
mozillafirefoxMatch78.10.0_1.el7.centos
mozillafirefoxMatch78.6.1_1.el7.centos
mozillafirefoxMatch91.4.0_1.el8_5
mozillafirefoxMatch91.7.0_3.el7.centos
mozillafirefoxMatch91.8.0_1.el7.centos
mozillafirefoxMatch60.7.2_3.el8_0
mozillafirefoxMatch60.9.0_1.el7.centos
mozillafirefoxMatch68.10.0_1.el7.centos
mozillafirefoxMatch60.7.0_1.el7.centos
mozillafirefoxMatch78.13.0_2.el7.centos
mozillafirefoxMatch91.13.0_1.el7.centos
mozillafirefoxMatch60.5.1_1.el8
mozillafirefoxMatch60.7.0_1.el8_0
mozillafirefoxMatch91.6.0_1.el8_5
mozillafirefoxMatch78.6.1_1.el8_3
mozillafirefoxMatch60.6.1_1.el7.centos
mozillafirefoxMatch91.13.0_1.el8
mozillafirefoxMatch60.6.0_3.el7.centos
mozillafirefoxMatch78.14.0_1.el7.centos
mozillafirefoxMatch78.12.0_2.el8_4.0.1
mozillafirefoxMatch78.8.0_1.el8_3
mozillafirefoxMatch78.11.0_3.el8_4
mozillafirefoxMatch68.7.0_2.el8_1
mozillafirefoxMatch78.12.0_2.el8_4
mozillafirefoxMatch60.8.0_1.el8_0
mozillafirefoxMatch68.8.0_1.el7.centos
mozillafirefoxMatch91.10.0_1.el7.centos
mozillafirefoxMatch60.2.0_1.el7.centos
mozillafirefoxMatch38.1.0_1.ael7b_1
expatexpatMatch2.2.5_4.el8
expatexpatMatch2.0.1_13.el6_8
expatexpatMatch2.1.0_11.el7
expatexpatMatch2.0.1_11.el6_2
expatexpatMatch2.0.1_9.1.el6
expatexpatMatch2.1.0_12.el7
expatexpatMatch2.1.0_10.el7_3
expatexpatMatch2.2.5_3.el8
expatexpatMatch2.2.5_5.el8
expatexpatMatch2.1.0_14.el7_9
SourceLink
githubwww.github.com/libexpat/libexpat/commit/dde178b976934e16526a3277d31d9fa3fab7a6c1
githubwww.github.com/libexpat/libexpat/pull/629
githubwww.github.com/libexpat/libexpat/pull/640
listswww.lists.debian.org/debian-lts-announce/2022/09/msg00029.html
debianwww.debian.org/security/2022/dsa-5236
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2ZKEPGFCZ7R6DRVH3K6RBJPT42ZBEG/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/WE2ZKEPGFCZ7R6DRVH3K6RBJPT42ZBEG/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/XCGBVQQ47URGJAZWHCISHDWF6QBTV2LE/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCGBVQQ47URGJAZWHCISHDWF6QBTV2LE/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/J2IGJNHFV53PYST7VQV3T4NHVYAMXA36/
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
07 Nov 2023 22:09Current
8.2High risk
Vulners AI Score8.2
CVSS 3.18.1
EPSS0.0176
libexpat.souse-after-freevulnerabilityxmlparse.cmethod
49