Описание
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| expat | fixed | 2.4.3-1 | package | |
| libxmltok | fixed | 1.2-4.2 | package | |
| libxmltok | ignored | bookworm | package |
Примечания
https://github.com/libexpat/libexpat/issues/532
https://github.com/libexpat/libexpat/pull/538
https://github.com/libexpat/libexpat/commit/85ae9a2d7d0e9358f356b33977b842df8ebaec2b (R_2_4_3)
EPSS
Процентиль: 88%
0.03885
Низкий
Связанные уязвимости
CVSS3: 8.1
ubuntu
больше 3 лет назад
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
CVSS3: 7.8
redhat
больше 3 лет назад
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
CVSS3: 8.1
nvd
больше 3 лет назад
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
CVSS3: 7.8
github
больше 3 лет назад
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
EPSS
Процентиль: 88%
0.03885
Низкий