Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-expatalma-upgrade-expat-devel | May 4, 2022 | Jan 24, 2022 | |
| Alpine Linux | alpine-linux-upgrade-expatalpine-linux-upgrade-qt5-qtwebengine | Aug 22, 2024 | Jan 24, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-expatamazon-linux-ami-2-upgrade-expat-debuginfoamazon-linux-ami-2-upgrade-expat-develamazon-linux-ami-2-upgrade-expat-static | Jul 4, 2022 | Jan 24, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-expat | Mar 5, 2022 | Jan 24, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-expatamazon-linux-2023-upgrade-expat-debuginfoamazon-linux-2023-upgrade-expat-debugsourceamazon-linux-2023-upgrade-expat-develamazon-linux-2023-upgrade-expat-static | Feb 17, 2025 | Jan 23, 2022 | |
| Centos_linux | — | centos-upgrade-expatcentos-upgrade-expat-debuginfocentos-upgrade-expat-debugsourcecentos-upgrade-expat-develcentos-upgrade-expat-static | Mar 17, 2022 | Jan 24, 2022 |
| Debian | debian-upgrade-expat | Feb 1, 2022 | Jan 24, 2022 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Apr 30, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-expat | Sep 30, 2022 | Jan 24, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-expat | May 9, 2022 | Jan 24, 2022 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-xulrunner | May 25, 2022 | Jan 24, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-expathuawei-euleros-2_0_sp5-upgrade-expat-develhuawei-euleros-2_0_sp5-upgrade-expat-static | Apr 26, 2022 | Jan 24, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-expathuawei-euleros-2_0_sp8-upgrade-expat-devel | Apr 26, 2022 | Jan 24, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-expat | Apr 19, 2022 | Jan 24, 2022 | |
| Ibm Aix | ibm-aix-python_advisory | Oct 12, 2022 | Jan 24, 2022 | |
| Ibm Http_server | ibm-http_server-apply-interim-fix-ph43122-for-7_0ibm-http_server-apply-interim-fix-ph43122-for-8_0ibm-http_server-apply-interim-fix-ph43122-for-8_5ibm-http_server-apply-interim-fix-ph43122-for-9_0ibm-http_server-apply-fix-pack-7_0_0_46ibm-http_server-apply-fix-pack-8_0_0_16ibm-http_server-apply-fix-pack-8_5_5_22ibm-http_server-apply-fix-pack-9_0_5_11 | Aug 31, 2022 | Mar 2, 2022 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 4, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-expatoracle-linux-upgrade-expat-develoracle-linux-upgrade-expat-static | Mar 17, 2022 | Jan 23, 2022 |
| Pulse Secure Pulse Connect Secure | pulse-secure-pulse-connect-secure-upgrade-9_1r15 | Mar 26, 2026 | Feb 14, 2023 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-expatredhat-upgrade-expat-debuginforedhat-upgrade-expat-debugsourceredhat-upgrade-expat-develredhat-upgrade-expat-static | Mar 17, 2022 | Jan 24, 2022 | |
| Rocky_linux | rocky-upgrade-expatrocky-upgrade-expat-debuginforocky-upgrade-expat-debugsourcerocky-upgrade-expat-devel | Mar 5, 2024 | Jan 24, 2022 | |
| Suse | — | suse-upgrade-expatsuse-upgrade-libexpat-develsuse-upgrade-libexpat-devel-32bitsuse-upgrade-libexpat1suse-upgrade-libexpat1-32bitsuse-upgrade-libqt5-qtwebengine | Feb 10, 2022 | Jan 24, 2022 |
| Ubuntu | ubuntu-pro-upgrade-lib64expat1ubuntu-pro-upgrade-libexpat1ubuntu-upgrade-libexpat1 | Feb 22, 2022 | Jan 24, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub