Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2022:6838

Опубликовано: 06 окт. 2022
Источник: rocky
Оценка: Important

Описание

Important: expat security update

Expat is a C library for parsing XML documents.

Security Fix(es):

  • expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
expati68612.el9_0.3expat-2.2.10-12.el9_0.3.i686.rpm
expatx86_6412.el9_0.3expat-2.2.10-12.el9_0.3.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 8.1
ubuntu
больше 3 лет назад

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

CVSS3: 8.1
redhat
больше 3 лет назад

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

CVSS3: 8.1
nvd
больше 3 лет назад

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

CVSS3: 8.1
msrc
больше 3 лет назад

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

CVSS3: 8.1
debian
больше 3 лет назад

libexpat before 2.4.9 has a use-after-free in the doContent function i ...