defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-expatalma-upgrade-expat-develalma-upgrade-xmlrpc-calma-upgrade-xmlrpc-c-c++alma-upgrade-xmlrpc-c-clientalma-upgrade-xmlrpc-c-client++alma-upgrade-xmlrpc-c-devel | May 4, 2022 | Jan 10, 2022 | |
| Alpine Linux | alpine-linux-upgrade-expat | Aug 22, 2024 | Jan 8, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-expatamazon-linux-ami-2-upgrade-expat-debuginfoamazon-linux-ami-2-upgrade-expat-develamazon-linux-ami-2-upgrade-expat-static | Sep 30, 2022 | Jan 10, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-expat | Jul 8, 2022 | Jan 10, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-expatamazon-linux-2023-upgrade-expat-debuginfoamazon-linux-2023-upgrade-expat-debugsourceamazon-linux-2023-upgrade-expat-develamazon-linux-2023-upgrade-expat-static | Feb 17, 2025 | Jan 15, 2022 | |
| Centos_linux | — | centos-upgrade-expatcentos-upgrade-expat-debuginfocentos-upgrade-expat-debugsourcecentos-upgrade-expat-develcentos-upgrade-expat-staticcentos-upgrade-xmlrpc-ccentos-upgrade-xmlrpc-c-apps-debuginfocentos-upgrade-xmlrpc-c-c-debuginfocentos-upgrade-xmlrpc-c-clientcentos-upgrade-xmlrpc-c-client-debuginfocentos-upgrade-xmlrpc-c-debuginfocentos-upgrade-xmlrpc-c-debugsource | Mar 17, 2022 | Jan 10, 2022 |
| Debian | debian-upgrade-expat | Feb 1, 2022 | Jan 10, 2022 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | May 1, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-expat | Sep 30, 2022 | Jan 10, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-expat | Apr 20, 2022 | Jan 10, 2022 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-xulrunner | May 25, 2022 | Jan 10, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-expathuawei-euleros-2_0_sp8-upgrade-expat-devel | Mar 29, 2022 | Jan 10, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-expat | Apr 19, 2022 | Jan 10, 2022 | |
| Ibm Aix | ibm-aix-python_advisory | Oct 12, 2022 | Jan 10, 2022 | |
| Ibm Http_server | ibm-http_server-apply-interim-fix-ph43122-for-7_0ibm-http_server-apply-interim-fix-ph43122-for-8_0ibm-http_server-apply-interim-fix-ph43122-for-8_5ibm-http_server-apply-interim-fix-ph43122-for-9_0ibm-http_server-apply-fix-pack-7_0_0_46ibm-http_server-apply-fix-pack-8_0_0_16ibm-http_server-apply-fix-pack-8_5_5_22ibm-http_server-apply-fix-pack-9_0_5_11 | Aug 31, 2022 | Mar 2, 2022 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 4, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-expatoracle-linux-upgrade-expat-develoracle-linux-upgrade-expat-staticoracle-linux-upgrade-xmlrpc-coracle-linux-upgrade-xmlrpc-c-coracle-linux-upgrade-xmlrpc-c-clientoracle-linux-upgrade-xmlrpc-c-devel | Mar 17, 2022 | Jan 15, 2022 |
| Redhat_linux | redhat-upgrade-expatredhat-upgrade-expat-debuginforedhat-upgrade-expat-debugsourceredhat-upgrade-expat-develredhat-upgrade-expat-staticredhat-upgrade-xmlrpc-credhat-upgrade-xmlrpc-c-apps-debuginforedhat-upgrade-xmlrpc-c-credhat-upgrade-xmlrpc-c-c-debuginforedhat-upgrade-xmlrpc-c-clientredhat-upgrade-xmlrpc-c-client-debuginforedhat-upgrade-xmlrpc-c-debuginforedhat-upgrade-xmlrpc-c-debugsourceredhat-upgrade-xmlrpc-c-devel | Mar 17, 2022 | Jan 10, 2022 | |
| Rocky_linux | rocky-upgrade-expatrocky-upgrade-expat-debuginforocky-upgrade-expat-debugsourcerocky-upgrade-expat-develrocky-upgrade-xmlrpc-crocky-upgrade-xmlrpc-c-c++rocky-upgrade-xmlrpc-c-c++-debuginforocky-upgrade-xmlrpc-c-clientrocky-upgrade-xmlrpc-c-client++rocky-upgrade-xmlrpc-c-client++-debuginforocky-upgrade-xmlrpc-c-client-debuginforocky-upgrade-xmlrpc-c-debuginforocky-upgrade-xmlrpc-c-debugsourcerocky-upgrade-xmlrpc-c-devel | Mar 5, 2024 | Jan 10, 2022 | |
| Suse | — | suse-upgrade-expatsuse-upgrade-libexpat-develsuse-upgrade-libexpat-devel-32bitsuse-upgrade-libexpat1suse-upgrade-libexpat1-32bit | Jan 26, 2022 | Jan 10, 2022 |
| Ubuntu | ubuntu-pro-upgrade-lib64expat1ubuntu-pro-upgrade-libexpat1ubuntu-pro-upgrade-libxmltok1ubuntu-pro-upgrade-libxmltok1t64ubuntu-upgrade-libexpat1ubuntu-upgrade-libxmltok1t64 | Feb 22, 2022 | Jan 10, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub