In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-expatalma-upgrade-expat-develalma-upgrade-xmlrpc-calma-upgrade-xmlrpc-c-c++alma-upgrade-xmlrpc-c-clientalma-upgrade-xmlrpc-c-client++alma-upgrade-xmlrpc-c-devel | May 4, 2022 | Jan 6, 2022 | |
| Alpine Linux | alpine-linux-upgrade-expat | Aug 22, 2024 | Jan 6, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-expatamazon-linux-ami-2-upgrade-expat-debuginfoamazon-linux-ami-2-upgrade-expat-develamazon-linux-ami-2-upgrade-expat-static | Sep 30, 2022 | Jan 6, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-expat | Jul 8, 2022 | Jan 6, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-expatamazon-linux-2023-upgrade-expat-debuginfoamazon-linux-2023-upgrade-expat-debugsourceamazon-linux-2023-upgrade-expat-develamazon-linux-2023-upgrade-expat-static | Feb 17, 2025 | Jan 15, 2022 | |
| Autodesk Autocad | autodesk-autocad-upgrade-latest | May 29, 2026 | Jul 28, 2022 | |
| Centos_linux | — | centos-upgrade-expatcentos-upgrade-expat-debuginfocentos-upgrade-expat-debugsourcecentos-upgrade-expat-develcentos-upgrade-expat-staticcentos-upgrade-xmlrpc-ccentos-upgrade-xmlrpc-c-apps-debuginfocentos-upgrade-xmlrpc-c-c-debuginfocentos-upgrade-xmlrpc-c-clientcentos-upgrade-xmlrpc-c-client-debuginfocentos-upgrade-xmlrpc-c-debuginfocentos-upgrade-xmlrpc-c-debugsource | Mar 17, 2022 | Jan 6, 2022 |
| Debian | debian-upgrade-expat | Feb 1, 2022 | Jan 6, 2022 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | May 1, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-expat | Sep 30, 2022 | Jan 6, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-expat | Apr 20, 2022 | Jan 6, 2022 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-xulrunner | May 25, 2022 | Jan 6, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-expathuawei-euleros-2_0_sp8-upgrade-expat-devel | Mar 29, 2022 | Jan 6, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-expat | Apr 19, 2022 | Jan 6, 2022 | |
| Ibm Aix | ibm-aix-python_advisory | Oct 12, 2022 | Jan 6, 2022 | |
| Ibm Http_server | ibm-http_server-apply-interim-fix-ph43122-for-7_0ibm-http_server-apply-interim-fix-ph43122-for-8_0ibm-http_server-apply-interim-fix-ph43122-for-8_5ibm-http_server-apply-interim-fix-ph43122-for-9_0ibm-http_server-apply-fix-pack-7_0_0_46ibm-http_server-apply-fix-pack-8_0_0_16ibm-http_server-apply-fix-pack-8_5_5_22ibm-http_server-apply-fix-pack-9_0_5_11 | Aug 31, 2022 | Mar 2, 2022 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 4, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-expatoracle-linux-upgrade-expat-develoracle-linux-upgrade-expat-staticoracle-linux-upgrade-xmlrpc-coracle-linux-upgrade-xmlrpc-c-coracle-linux-upgrade-xmlrpc-c-clientoracle-linux-upgrade-xmlrpc-c-devel | Mar 17, 2022 | Jan 15, 2022 |
| Redhat_linux | redhat-upgrade-expatredhat-upgrade-expat-debuginforedhat-upgrade-expat-debugsourceredhat-upgrade-expat-develredhat-upgrade-expat-staticredhat-upgrade-xmlrpc-credhat-upgrade-xmlrpc-c-apps-debuginforedhat-upgrade-xmlrpc-c-credhat-upgrade-xmlrpc-c-c-debuginforedhat-upgrade-xmlrpc-c-clientredhat-upgrade-xmlrpc-c-client-debuginforedhat-upgrade-xmlrpc-c-debuginforedhat-upgrade-xmlrpc-c-debugsourceredhat-upgrade-xmlrpc-c-devel | Mar 17, 2022 | Jan 6, 2022 | |
| Rocky_linux | rocky-upgrade-expatrocky-upgrade-expat-debuginforocky-upgrade-expat-debugsourcerocky-upgrade-expat-develrocky-upgrade-xmlrpc-crocky-upgrade-xmlrpc-c-c++rocky-upgrade-xmlrpc-c-c++-debuginforocky-upgrade-xmlrpc-c-clientrocky-upgrade-xmlrpc-c-client++rocky-upgrade-xmlrpc-c-client++-debuginforocky-upgrade-xmlrpc-c-client-debuginforocky-upgrade-xmlrpc-c-debuginforocky-upgrade-xmlrpc-c-debugsourcerocky-upgrade-xmlrpc-c-devel | Mar 5, 2024 | Jan 6, 2022 | |
| Suse | — | suse-upgrade-expatsuse-upgrade-libexpat-develsuse-upgrade-libexpat-devel-32bitsuse-upgrade-libexpat1suse-upgrade-libexpat1-32bit | Jan 26, 2022 | Jan 6, 2022 |
| Ubuntu | ubuntu-pro-upgrade-lib64expat1ubuntu-pro-upgrade-libexpat1ubuntu-pro-upgrade-libxmltok1ubuntu-pro-upgrade-libxmltok1t64ubuntu-pro-upgrade-mameubuntu-pro-upgrade-mame-dataubuntu-pro-upgrade-mame-toolsubuntu-upgrade-libexpat1ubuntu-upgrade-libxmltok1t64ubuntu-upgrade-mameubuntu-upgrade-mame-dataubuntu-upgrade-mame-tools | Feb 22, 2022 | Jan 6, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 6, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub