Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Use After Free

🗓️ 25 Oct 2022 05:03:57Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 34 Views

libexpat.so use-after-free vulnerability in XML_ParserFree paramete

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins		Security Bulletin: IBM Security Verify Access Appliance has multiple security vulnerabilities
14 Oct 202305:03
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2022-43680, CVE-2013-0340, CVE-2017-9233)
13 Dec 202205:37
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
30 Mar 202315:19
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Vulnerability in libexpat (CVE-2022-43680) affects Power HMC
3 Jun 202310:21
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in Expat component shipped with IBM Rational ClearCase [CVE-2022-40674, CVE-2022-43680]
31 Jan 202314:01
–ibm
ibm
IBM Security Bulletins		Security Bulletin: AIX is affected by a denial of service (CVE-2022-43680) due to Python
22 Dec 202217:08
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM HTTP Server is vulnerable to denial of service due to libexpat (CVE-2022-43680, CVE-2013-0340, CVE-2017-9233)
22 Nov 202215:44
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities have been identified in IBM HTTP Server used by IBM Rational ClearQuest (CVE-2022-43680, CVE-2013-0340, CVE-2017-9233)
2 Dec 202202:21
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities
7 Jun 202316:53
–ibm
ibm
IBM Security Bulletins		Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from libxml2, expat, libtasn1 and systemd
25 Jan 202316:27
–ibm
Rows per page
Vulners
Node
OR
AND
expatexpatMatch2.4.1-r0cpp
expatexpatMatch2.4.6-r0cpp
expatexpatMatch2.4.8-r0cpp
expatexpatMatch2.4.2-r0cpp
expatexpatMatch2.4.9-r0cpp
expatexpatMatch2.3.0-r0cpp
expatexpatMatch2.4.7-r0cpp
expatexpatMatch2.2.10-r1cpp
expatexpatMatch2.4.4-r0cpp
expatexpatMatch2.4.8-r1cpp
expatexpatMatch2.4.5-r0cpp
expatexpatMatch2.4.3-r0cpp
expatexpatMatch2.2.9-r1cpp
alpinelinuxalpine_linuxMatchedge
AND
expatexpatMatch2.2.10-r5cpp
expatexpatMatch2.2.10-r2cpp
expatexpatMatch2.2.10-r1cpp
expatexpatMatch2.2.10-r7cpp
expatexpatMatch2.2.10-r4cpp
expatexpatMatch2.2.10-r6cpp
alpinelinuxalpine_linuxMatch3.13
AND
expatexpatMatch2.4.8-r0cpp
expatexpatMatch2.4.9-r0cpp
alpinelinuxalpine_linuxMatch3.16
AND
expatexpatMatch2.4.4-r0cpp
expatexpatMatch2.4.1-r0cpp
expatexpatMatch2.4.3-r0cpp
expatexpatMatch2.4.7-r0cpp
expatexpatMatch2.4.9-r0cpp
expatexpatMatch2.3.0-r0cpp
expatexpatMatch2.4.5-r0cpp
expatexpatMatch2.4.6-r0cpp
alpinelinuxalpine_linuxMatch3.14
AND
expatexpatMatch2.4.4-r0cpp
expatexpatMatch2.4.9-r0cpp
expatexpatMatch2.4.5-r0cpp
expatexpatMatch2.4.3-r0cpp
expatexpatMatch2.4.1-r0cpp
expatexpatMatch2.4.6-r0cpp
expatexpatMatch2.4.7-r0cpp
alpinelinuxalpine_linuxMatch3.15
AND
expatexpatMatch2.2.6-2+deb10u1debian
debiandebian_linuxMatch10
AND
expatexpatMatch2.2.10-1debian
debiandebian_linuxMatch11
AND
expatexpatMatch2.2.10-1debian
expatexpatMatch2.4.1-2debian
debiandebian_linuxMatch999
AND
googlebionicMatch2.2.5-3ubuntu0.2debian
debiandebian_linux
AND
focalfocalMatch2.2.9-1build1debian
debiandebian_linux
AND
develdevelMatch2.2.9-1build1debian
develdevelMatch2.2.10-1debian
develdevelMatch2.2.10-2debian
debiandebian_linux
OR
libexpat.solibexpat.soRange1.5.2–1.8.9cpp
mozillathunderbirdMatch60.6.1_1.el7.centos
mozillathunderbirdMatch60.5.0_1.el7.centos
mozillathunderbirdMatch68.4.1_2.el7.centos
mozillathunderbirdMatch91.2.0_1.el7.centos
mozillathunderbirdMatch38.2.0_1.ael7b_1
mozillathunderbirdMatch68.8.0_1.el7.centos
mozillathunderbirdMatch91.8.0_1.el8s
mozillathunderbirdMatch91.3.0_2.el8
mozillathunderbirdMatch78.4.0_1.el7.centos
mozillathunderbirdMatch68.9.0_1.el7.centos
mozillathunderbirdMatch78.10.0_1.el7.centos
mozillathunderbirdMatch31.7.0_1.ael7b_1
mozillathunderbirdMatch78.7.0_1.el7.centos.plus
mozillathunderbirdMatch78.13.0_1.el7.centos.plus
mozillathunderbirdMatch78.11.0_1.0.1.el8
mozillathunderbirdMatch91.7.0_2.el7.centos
mozillathunderbirdMatch31.6.0_1.ael7b_1
mozillathunderbirdMatch91.2.0_1.el7.centos.plus
mozillathunderbirdMatch31.8.0_1.ael7b_1
mozillathunderbirdMatch91.6.0_1.el8s
mozillathunderbirdMatch78.12.0_3.el8
mozillathunderbirdMatch60.5.0_1.el8
mozillathunderbirdMatch91.9.0_3.el8s
mozillathunderbirdMatch60.7.2_2.el7.centos
mozillathunderbirdMatch78.9.0_3.el7.centos.plus
mozillathunderbirdMatch78.12.0_2.el7.centos
mozillathunderbirdMatch102.5.0_2.el7.centos
mozillathunderbirdMatch60.3.0_1.el7.centos
mozillathunderbirdMatch68.2.0_1.el7.centos
mozillathunderbirdMatch78.14.0_1.el7.centos.plus
mozillathunderbirdMatch91.10.0_1.el7.centos.plus
mozillathunderbirdMatch60.7.0_1.el7.centos
mozillathunderbirdMatch78.13.0_1.el8
mozillathunderbirdMatch78.7.0_1.el7.centos
mozillathunderbirdMatch91.9.1_1.el8s
mozillathunderbirdMatch60.8.0_1.el7.centos
mozillathunderbirdMatch60.8.0_1.el8_0
mozillathunderbirdMatch91.11.0_2.el7.centos
mozillathunderbirdMatch91.8.0_1.el7.centos
mozillathunderbirdMatch78.9.0_3.el8
mozillathunderbirdMatch91.3.0_2.el7.centos.plus
mozillathunderbirdMatch91.6.0_1.el7.centos.plus
mozillathunderbirdMatch91.7.0_2.el7.centos.plus
mozillathunderbirdMatch91.11.0_2.el8s
mozillathunderbirdMatch91.13.0_1.el8s
mozillathunderbirdMatch78.6.1_1.el8
mozillathunderbirdMatch78.11.0_1.el7.centos
mozillathunderbirdMatch78.11.0_1.el8
mozillathunderbirdMatch78.10.0_1.el8
mozillathunderbirdMatch78.8.0_1.el7.centos
mozillathunderbirdMatch91.9.1_1.el7.centos.plus
mozillathunderbirdMatch78.5.0_1.el7.centos
mozillathunderbirdMatch78.9.1_1.el7.centos.plus
mozillathunderbirdMatch78.12.0_2.el7.centos.plus
mozillathunderbirdMatch78.6.1_1.el7.centos
mozillathunderbirdMatch68.7.0_1.el7.centos
mozillathunderbirdMatch78.10.0_1.el7.centos.plus
mozillathunderbirdMatch91.10.0_1.el8s
mozillathunderbirdMatch52.9.1_1.el7.centos
mozillathunderbirdMatch91.6.0_1.el7.centos
mozillathunderbirdMatch68.5.0_1.el7.centos
mozillathunderbirdMatch91.2.0_1.el8
mozillathunderbirdMatch78.14.0_1.el7.centos
mozillathunderbirdMatch52.8.0_1.el7.centos
mozillathunderbirdMatch68.10.0_1.el7.centos
mozillathunderbirdMatch78.13.0_1.el7.centos
mozillathunderbirdMatch91.8.0_1.el7.centos.plus
mozillathunderbirdMatch68.11.0_1.el7.centos
mozillathunderbirdMatch78.9.1_1.el8
mozillathunderbirdMatch102.7.1_1.el7.centos
mozillathunderbirdMatch78.9.0_3.el7.centos
mozillathunderbirdMatch78.7.0_1.el8
mozillathunderbirdMatch78.6.0_1.el7.centos
mozillathunderbirdMatch78.8.0_1.el8
mozillathunderbirdMatch91.12.0_1.el7.centos.plus
mozillathunderbirdMatch60.4.0_1.el7.centos
mozillathunderbirdMatch78.6.1_1.el7.centos.plus
mozillathunderbirdMatch91.4.0_2.el8s
mozillathunderbirdMatch68.6.0_1.el7.centos
mozillathunderbirdMatch91.4.0_3.el7.centos
mozillathunderbirdMatch91.3.0_2.el8s
mozillathunderbirdMatch91.13.0_1.el7.centos.plus
mozillathunderbirdMatch78.11.0_1.el7.centos.plus
mozillathunderbirdMatch91.7.0_2.el8s
mozillathunderbirdMatch91.9.0_3.el7.centos
mozillathunderbirdMatch91.10.0_1.el7.centos
mozillathunderbirdMatch91.4.0_3.el7.centos.plus
mozillathunderbirdMatch91.5.0_1.el7.centos.plus
mozillathunderbirdMatch91.12.0_1.el8s
mozillathunderbirdMatch91.9.1_1.el7.centos
mozillathunderbirdMatch91.13.0_1.el7.centos
mozillathunderbirdMatch91.3.0_2.el7.centos
mozillathunderbirdMatch78.9.1_1.el7.centos
mozillathunderbirdMatch78.12.0_1.el8
mozillathunderbirdMatch68.3.0_1.el7.centos
mozillathunderbirdMatch91.5.0_1.el7.centos
mozillathunderbirdMatch91.11.0_2.el7.centos.plus
mozillathunderbirdMatch68.12.0_1.el7.centos
mozillathunderbirdMatch78.14.0_1.el8s
mozillathunderbirdMatch38.3.0_1.ael7b_1
mozillathunderbirdMatch91.5.0_1.el8s
mozillathunderbirdMatch91.9.0_3.el7.centos.plus
mozillathunderbirdMatch91.12.0_1.el7.centos
mozillathunderbirdMatch78.8.0_1.el7.centos.plus
mozillathunderbirdMatch91.2.0_1.el8s
mozillathunderbirdMatch78.14.0_1.el8
mozillathunderbirdMatch60.9.0_1.el7.centos
mozillathunderbirdMatch102.6.0_2.el7.centos
mozillathunderbirdMatch91.4.0_2.el8
mozillathunderbirdMatch102.12.0_1.el7.centos
mozillathunderbirdMatch102.10.0_2.el7.centos
mozillathunderbirdMatch102.8.0_2.el7.centos
mozillathunderbirdMatch102.7.1_2.el7.centos
mozillathunderbirdMatch102.11.0_1.el7.centos
mozillathunderbirdMatch102.9.0_1.el7.centos
compat-expat1compat-expat1Match1.95.8_8.el6
mozillafirefoxMatch91.7.0_3.el7.centos
mozillafirefoxMatch102.5.0_1.el7.centos
mozillafirefoxMatch60.6.0_3.el7.centos
mozillafirefoxMatch78.4.0_1.el8_2
mozillafirefoxMatch91.10.0_1.el7.centos
mozillafirefoxMatch78.14.0_1.el7.centos
mozillafirefoxMatch68.6.1_1.el7.centos
mozillafirefoxMatch68.5.0_2.el8_1
mozillafirefoxMatch78.12.0_1.el7.centos
mozillafirefoxMatch60.3.0_1.el7.centos
mozillafirefoxMatch78.3.0_1.el8_2
mozillafirefoxMatch78.5.0_1.el8_3
mozillafirefoxMatch91.9.0_1.el7.centos
mozillafirefoxMatch38.2.0_4.ael7b_1
mozillafirefoxMatch91.12.0_2.el8
mozillafirefoxMatch91.6.0_1.el8_5
mozillafirefoxMatch38.0_3.ael7b_1
mozillafirefoxMatch68.11.0_1.el8_2
mozillafirefoxMatch78.11.0_3.el8_4
mozillafirefoxMatch91.12.0_2.el7.centos
mozillafirefoxMatch68.3.0_1.el7.centos
mozillafirefoxMatch60.5.1_1.el7.centos
mozillafirefoxMatch91.6.0_1.el7.centos
mozillafirefoxMatch78.4.1_1.el7.centos
mozillafirefoxMatch91.5.0_1.el7.centos
mozillafirefoxMatch78.13.0_2.el7.centos
mozillafirefoxMatch68.11.0_1.el7.centos
mozillafirefoxMatch60.9.0_1.el7.centos
mozillafirefoxMatch68.9.0_1.el8
mozillafirefoxMatch78.14.0_1.el8_4
mozillafirefoxMatch60.7.2_1.el7.centos
mozillafirefoxMatch102.6.0_1.el7.centos
mozillafirefoxMatch60.1.0_4.el7.centos
mozillafirefoxMatch78.6.0_1.el8_3
mozillafirefoxMatch91.4.0_1.el7.centos
mozillafirefoxMatch60.2.0_1.el7.centos
mozillafirefoxMatch91.4.0_1.el8_5
mozillafirefoxMatch78.12.0_2.el8_4.0.1
mozillafirefoxMatch68.10.0_1.el7.centos
mozillafirefoxMatch102.7.0_1.el8
mozillafirefoxMatch68.1.0_1.el8_0
mozillafirefoxMatch68.10.0_1.el8_2
mozillafirefoxMatch60.7.2_3.el8_0
mozillafirefoxMatch91.11.0_2.el8
mozillafirefoxMatch38.3.0_2.ael7b_1
mozillafirefoxMatch78.7.0_2.el8_3
mozillafirefoxMatch91.11.0_2.el7.centos
mozillafirefoxMatch78.8.0_1.el8_3
mozillafirefoxMatch68.6.0_1.el7.centos
mozillafirefoxMatch78.3.0_1.el8
mozillafirefoxMatch78.6.1_1.el8_3
mozillafirefoxMatch31.5.3_3.ael7b_1
mozillafirefoxMatch68.2.0_1.el7.centos
mozillafirefoxMatch78.13.0_2.el8_4
mozillafirefoxMatch68.5.0_2.el7.centos
mozillafirefoxMatch68.1.0_2.el7.centos
mozillafirefoxMatch78.2.0_3.el8
mozillafirefoxMatch91.8.0_1.el7.centos
mozillafirefoxMatch60.8.0_1.el7.centos
mozillafirefoxMatch68.4.1_1.el7.centos
mozillafirefoxMatch38.0.1_1.ael7b_1
mozillafirefoxMatch91.3.0_1.el7.centos
mozillafirefoxMatch91.5.0_1.el8_5
mozillafirefoxMatch38.4.0_1.ael7b_1
mozillafirefoxMatch60.2.2_1.el7.centos
mozillafirefoxMatch91.7.0_3.el8
mozillafirefoxMatch68.9.0_1.el8_2
mozillafirefoxMatch91.2.0_4.el8_4
mozillafirefoxMatch68.3.0_1.el8_1
mozillafirefoxMatch60.7.0_1.el8_0
mozillafirefoxMatch78.11.0_3.el7.centos
mozillafirefoxMatch60.6.1_1.el8
mozillafirefoxMatch78.7.0_2.el7.centos
mozillafirefoxMatch68.8.0_1.el7.centos
mozillafirefoxMatch68.7.0_2.el7.centos
mozillafirefoxMatch68.4.1_1.el8_1
mozillafirefoxMatch60.2.1_1.el7.centos
mozillafirefoxMatch38.2.1_1.ael7b_1
mozillafirefoxMatch78.2.0_2.el8_2
mozillafirefoxMatch91.9.0_1.el8
mozillafirefoxMatch60.6.1_1.el7.centos
mozillafirefoxMatch68.9.0_1.el7.centos
mozillafirefoxMatch38.1.1_1.ael7b_1
mozillafirefoxMatch52.7.3_1.el7.centos
mozillafirefoxMatch38.1.0_1.ael7b_1
mozillafirefoxMatch78.12.0_2.el8_4
mozillafirefoxMatch60.5.0_2.el7.centos
mozillafirefoxMatch78.9.0_1.el7.centos
mozillafirefoxMatch52.7.0_1.el7.centos
mozillafirefoxMatch78.4.0_1.el7.centos
mozillafirefoxMatch78.10.0_1.el8_3
mozillafirefoxMatch91.13.0_1.el7.centos
mozillafirefoxMatch91.8.0_1.el8
mozillafirefoxMatch78.6.1_1.el7.centos
mozillafirefoxMatch91.2.0_1.el8_4
mozillafirefoxMatch78.9.0_1.el8_3
mozillafirefoxMatch68.12.0_1.el7.centos
mozillafirefoxMatch91.13.0_1.el8
mozillafirefoxMatch102.7.0_1.el7.centos
mozillafirefoxMatch78.10.0_1.el7.centos
mozillafirefoxMatch60.5.1_1.el8
mozillafirefoxMatch78.8.0_1.el7.centos
mozillafirefoxMatch52.8.0_1.el7.centos
mozillafirefoxMatch78.6.0_1.el7.centos
mozillafirefoxMatch31.6.0_2.ael7b_1
mozillafirefoxMatch60.4.0_1.el7.centos
mozillafirefoxMatch68.7.0_2.el8_1
mozillafirefoxMatch78.5.0_1.el7.centos
mozillafirefoxMatch60.7.0_1.el7.centos
mozillafirefoxMatch68.6.0_1.el8_1
mozillafirefoxMatch102.4.0_1.el8
mozillafirefoxMatch60.4.0_1.el7.centos.0.1
mozillafirefoxMatch91.3.0_1.el8_4
mozillafirefoxMatch91.10.0_1.el8
mozillafirefoxMatch68.2.0_2.el8_0
mozillafirefoxMatch91.2.0_4.el7.centos
mozillafirefoxMatch78.12.0_1.el8_4
mozillafirefoxMatch60.8.0_1.el8_0
mozillafirefoxMatch91.9.1_1.el7.centos
mozillafirefoxMatch102.12.0_1.el7.centos
mozillafirefoxMatch102.9.0_3.el7.centos
mozillafirefoxMatch102.10.0_1.el7.centos
mozillafirefoxMatch102.11.0_2.el8
mozillafirefoxMatch102.8.0_2.el7.centos
mozillafirefoxMatch102.10.0_1.el8
mozillafirefoxMatch102.12.0_1.el8
mozillafirefoxMatch102.11.0_2.el7.centos
expatexpatMatch2.1.0_12.el7
expatexpatMatch2.0.1_11.el6_2
expatexpatMatch2.1.0_15.el7_9
expatexpatMatch2.2.5_8.el8
expatexpatMatch2.1.0_11.el7
expatexpatMatch2.1.0_14.el7_9
expatexpatMatch2.1.0_10.el7_3
expatexpatMatch2.2.5_4.el8
expatexpatMatch2.0.1_13.el6_8
expatexpatMatch2.2.5_9.el8
expatexpatMatch2.0.1_9.1.el6
expatexpatMatch2.2.5_5.el8
expatexpatMatch2.2.5_3.el8
SourceLink
githubwww.github.com/libexpat/libexpat/pull/650
githubwww.github.com/libexpat/libexpat/issues/649
githubwww.github.com/libexpat/libexpat/commit/5290462a7ea1278a8d5c0d5b2860d4e244f997e4
listswww.lists.debian.org/debian-lts-announce/2022/10/msg00033.html
debianwww.debian.org/security/2022/dsa-5266
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/AJ5VY2VYXE4WTRGQ6LMGLF6FV3SY37YE/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AJ5VY2VYXE4WTRGQ6LMGLF6FV3SY37YE/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/DPQVIF6TOJNY2T3ZZETFKR4G34FFREBQ/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPQVIF6TOJNY2T3ZZETFKR4G34FFREBQ/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/XG5XOOB7CD55CEE6OJYKSACSIMQ4RWQ6/
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Jan 2024 07:26Current
7.5High risk
Vulners AI Score7.5
CVSS 3.17.5
EPSS0.02324
libexpat.souse-after-freexml_parserfreeentity value validationsxmlparse.cmemory consumptionapplication crash
34