Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-mingw32-expatalma-upgrade-mingw64-expat | Nov 14, 2022 | Jan 26, 2022 | |
| Alpine Linux | alpine-linux-upgrade-expat | Aug 22, 2024 | Jan 26, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-expatamazon-linux-ami-2-upgrade-expat-debuginfoamazon-linux-ami-2-upgrade-expat-develamazon-linux-ami-2-upgrade-expat-static | Oct 6, 2023 | Jan 26, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-expat | Nov 4, 2023 | Jan 26, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-expatamazon-linux-2023-upgrade-expat-debuginfoamazon-linux-2023-upgrade-expat-debugsourceamazon-linux-2023-upgrade-expat-develamazon-linux-2023-upgrade-expat-static | Feb 17, 2025 | Jan 26, 2022 | |
| Debian | debian-upgrade-expat | Feb 1, 2022 | Jan 26, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-expat | Sep 30, 2022 | Jan 26, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-expat | May 9, 2022 | Jan 26, 2022 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-xulrunner | May 25, 2022 | Jan 26, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-expathuawei-euleros-2_0_sp5-upgrade-expat-develhuawei-euleros-2_0_sp5-upgrade-expat-static | Apr 26, 2022 | Jan 26, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-expathuawei-euleros-2_0_sp8-upgrade-expat-devel | Apr 26, 2022 | Jan 26, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-expat | Apr 19, 2022 | Jan 26, 2022 | |
| Ibm Aix | ibm-aix-python_advisory | Oct 12, 2022 | Jan 26, 2022 | |
| Ibm Http_server | ibm-http_server-apply-interim-fix-ph43122-for-7_0ibm-http_server-apply-interim-fix-ph43122-for-8_0ibm-http_server-apply-interim-fix-ph43122-for-8_5ibm-http_server-apply-interim-fix-ph43122-for-9_0ibm-http_server-apply-fix-pack-7_0_0_46ibm-http_server-apply-fix-pack-8_0_0_16ibm-http_server-apply-fix-pack-8_5_5_22ibm-http_server-apply-fix-pack-9_0_5_11 | Aug 31, 2022 | Mar 2, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-expatoracle-linux-upgrade-expat-develoracle-linux-upgrade-expat-static | Mar 17, 2022 | Jan 26, 2022 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-expatredhat-upgrade-expat-debuginforedhat-upgrade-expat-debugsourceredhat-upgrade-expat-develredhat-upgrade-mingw32-expatredhat-upgrade-mingw32-expat-debuginforedhat-upgrade-mingw64-expatredhat-upgrade-mingw64-expat-debuginfo | Dec 15, 2023 | Jan 26, 2022 | |
| Suse | — | suse-upgrade-expatsuse-upgrade-libexpat-develsuse-upgrade-libexpat-devel-32bitsuse-upgrade-libexpat1suse-upgrade-libexpat1-32bit | Feb 10, 2022 | Jan 26, 2022 |
| Ubuntu | ubuntu-pro-upgrade-lib64expat1ubuntu-pro-upgrade-libexpat1ubuntu-upgrade-libexpat1 | Feb 22, 2022 | Jan 26, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub