Описание
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| expat | fixed | 2.4.8-2 | package | |
| libxmltok | removed | package | ||
| libxmltok | ignored | bookworm | package |
Примечания
https://github.com/libexpat/libexpat/pull/629
https://github.com/libexpat/libexpat/pull/640
https://github.com/libexpat/libexpat/commit/4a32da87e931ba54393d465bb77c40b5c33d343b
EPSS
Процентиль: 76%
0.00995
Низкий
Связанные уязвимости
CVSS3: 8.1
ubuntu
больше 3 лет назад
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
CVSS3: 8.1
redhat
больше 3 лет назад
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
CVSS3: 8.1
nvd
больше 3 лет назад
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
CVSS3: 8.1
msrc
больше 3 лет назад
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
EPSS
Процентиль: 76%
0.00995
Низкий