Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2022:6878

Опубликовано: 11 окт. 2022
Источник: rocky
Оценка: Important

Описание

Important: expat security update

Expat is a C library for parsing XML documents.

Security Fix(es):

  • expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
expati6868.el8_6.3expat-2.2.5-8.el8_6.3.i686.rpm
expatx86_648.el8_6.3expat-2.2.5-8.el8_6.3.x86_64.rpm
expat-develi6868.el8_6.3expat-devel-2.2.5-8.el8_6.3.i686.rpm
expat-develx86_648.el8_6.3expat-devel-2.2.5-8.el8_6.3.x86_64.rpm

Показывать по

Связанные CVE

CVE-2022-40674

Ссылки на источники

Исправления

Связанные уязвимости

ubuntu логотип

CVE-2022-40674

CVSS3: 8.1
ubuntu
больше 3 лет назад

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

redhat логотип

CVE-2022-40674

CVSS3: 8.1
redhat
больше 3 лет назад

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

nvd логотип

CVE-2022-40674

CVSS3: 8.1
nvd
больше 3 лет назад

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

msrc логотип

CVE-2022-40674

CVSS3: 8.1
msrc
больше 3 лет назад

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

debian логотип

CVE-2022-40674

CVSS3: 8.1
debian
больше 3 лет назад

libexpat before 2.4.9 has a use-after-free in the doContent function i ...