Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-25236

Опубликовано: 16 фев. 2022
Источник: ubuntu
Приоритет: high
EPSS Средний
CVSS2: 7.5
CVSS3: 9.8

Описание

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.

РелизСтатусПримечание
bionic

not-affected

code-not-compiled
devel

not-affected

code-not-compiled
esm-infra-legacy/trusty

not-affected

code-not-compiled
esm-infra-legacy/xenial

not-affected

code-not-compiled
esm-infra/bionic

not-affected

code-not-compiled
esm-infra/focal

not-affected

code-not-compiled
esm-infra/xenial

not-affected

code-not-compiled
focal

not-affected

code-not-compiled
impish

not-affected

code-not-compiled
jammy

not-affected

code-not-compiled

Показывать по

РелизСтатусПримечание
bionic

not-affected

code-not-compiled
devel

not-affected

code-not-compiled
esm-infra-legacy/trusty

not-affected

code-not-compiled
esm-infra-legacy/xenial

not-affected

code-not-compiled
esm-infra/bionic

not-affected

code-not-compiled
esm-infra/focal

not-affected

code-not-compiled
esm-infra/xenial

not-affected

code-not-compiled
focal

not-affected

code-not-compiled
impish

not-affected

code-not-compiled
jammy

not-affected

code-not-compiled

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps-legacy/xenial

released

0.6.3-3ubuntu0.1~esm1
esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

impish

DNE

jammy

DNE

kinetic

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps-legacy/xenial

released

0.1.0+git20150808-2ubuntu0.1~esm1
esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

impish

DNE

jammy

DNE

kinetic

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

not-affected

uses system expat
esm-apps-legacy/xenial

not-affected

uses system expat
esm-apps/bionic

not-affected

uses system expat
esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/resolute

not-affected

uses system expat
esm-apps/xenial

not-affected

uses system expat
esm-infra-legacy/trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

code-not-compiled
devel

not-affected

code-not-compiled
esm-infra-legacy/trusty

DNE

esm-infra-legacy/xenial

not-affected

code-not-compiled
esm-infra/bionic

not-affected

code-not-compiled
esm-infra/focal

not-affected

code-not-compiled
esm-infra/xenial

not-affected

code-not-compiled
focal

not-affected

code-not-compiled
impish

not-affected

code-not-compiled
jammy

not-affected

code-not-compiled

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

not-affected

uses system expat
esm-apps-legacy/xenial

released

3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2
esm-apps/bionic

released

3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1
esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/resolute

not-affected

uses system expat
esm-apps/xenial

released

3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2
esm-infra-legacy/trusty

released

3.1.4~abc9f50-4ubuntu2+esm2

Показывать по

РелизСтатусПримечание
bionic

released

2.2.5-3ubuntu0.4
devel

released

2.4.5-2
esm-infra-legacy/trusty

released

2.1.0-4ubuntu1.4+esm4
esm-infra-legacy/xenial

released

2.1.0-7ubuntu0.16.04.5+esm2
esm-infra/bionic

released

2.2.5-3ubuntu0.4
esm-infra/focal

released

2.2.9-1ubuntu0.2
esm-infra/xenial

released

2.1.0-7ubuntu0.16.04.5+esm2
focal

released

2.2.9-1ubuntu0.2
impish

released

2.4.1-2ubuntu0.1
jammy

released

2.4.5-2

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

released

1:1snap1-0ubuntu1
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

ignored

end of standard support, was ignored [bundled deps handled by upstream in new versions]
impish

ignored

end of life
jammy

released

1:1snap1-0ubuntu1
kinetic

released

1:1snap1-0ubuntu1
lunar

released

1:1snap1-0ubuntu1
mantic

released

1:1snap1-0ubuntu1

Показывать по

РелизСтатусПримечание
bionic

not-affected

uses system expat
devel

not-affected

uses system expat
esm-apps-legacy/xenial

not-affected

uses system expat
esm-apps/bionic

not-affected

uses system expat
esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/resolute

not-affected

uses system expat
esm-apps/xenial

not-affected

uses system expat
esm-infra-legacy/trusty

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
bionic

not-affected

code-not-compiled
devel

not-affected

code-not-compiled
esm-infra-legacy/trusty

DNE

esm-infra-legacy/xenial

not-affected

code-not-compiled
esm-infra/bionic

not-affected

code-not-compiled
esm-infra/focal

not-affected

code-not-compiled
esm-infra/xenial

not-affected

code-not-compiled
focal

not-affected

code-not-compiled
impish

not-affected

code-not-compiled
jammy

not-affected

code-not-compiled

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps-legacy/xenial

released

3.20.1+git20120521-6ubuntu0.1~esm1
esm-apps/xenial

released

3.20.1+git20120521-6ubuntu0.1~esm1
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

impish

DNE

jammy

DNE

kinetic

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

uses system expat
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

not-affected

uses system expat
esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

DNE

focal

not-affected

uses system expat
impish

ignored

end of life

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-apps-legacy/xenial

released

1.2-3ubuntu0.16.04.1~esm2
esm-apps/bionic

released

1.2-4ubuntu0.18.04.1~esm1
esm-apps/focal

released

1.2-4ubuntu0.20.04.1~esm1
esm-apps/jammy

released

1.2-4ubuntu0.22.04.1~esm1
esm-apps/noble

released

1.2-4.1ubuntu1
esm-apps/xenial

released

1.2-3ubuntu0.16.04.1~esm2
focal

ignored

end of standard support, was needed
hirsute

ignored

end of life

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

ignored

esm-apps-legacy/xenial

ignored

esm-apps/bionic

ignored

esm-apps/focal

ignored

esm-apps/jammy

ignored

esm-apps/noble

ignored

esm-apps/resolute

ignored

esm-apps/xenial

ignored

esm-infra-legacy/trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

code-not-compiled
devel

DNE

esm-apps-legacy/xenial

not-affected

code-not-compiled
esm-apps/bionic

not-affected

code-not-compiled
esm-apps/xenial

not-affected

code-not-compiled
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

impish

DNE

jammy

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

needs-triage

esm-apps-legacy/xenial

released

2.4.7-4ubuntu0.1~esm1
esm-apps/bionic

released

2.4.7-5ubuntu1+esm1
esm-apps/focal

released

2.4.7-6ubuntu0.1~esm1
esm-apps/jammy

released

2.4.7-6.1ubuntu0.1~esm1
esm-apps/noble

released

2.4.7-6.2ubuntu0.1~esm1
esm-apps/resolute

released

2.4.7-7.1ubuntu0.1~esm1
esm-apps/xenial

released

2.4.7-4ubuntu0.1~esm1
esm-infra-legacy/trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

needs-triage

esm-apps-legacy/xenial

not-affected

uses system expat
esm-apps/bionic

needs-triage

esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/resolute

not-affected

uses system expat
esm-apps/xenial

not-affected

uses system expat
esm-infra-legacy/trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

code-not-compiled
devel

not-affected

code-not-compiled
esm-apps/resolute

not-affected

code-not-compiled
esm-infra-legacy/trusty

DNE

esm-infra-legacy/xenial

not-affected

code-not-compiled
esm-infra/bionic

not-affected

code-not-compiled
esm-infra/focal

not-affected

code-not-compiled
esm-infra/xenial

not-affected

code-not-compiled
focal

not-affected

code-not-compiled
impish

not-affected

code-not-compiled

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

ignored

bundled deps handled by upstream in new versions
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

ignored

end of standard support, was ignored [bundled deps handled by upstream in new versions]
impish

ignored

end of life
jammy

ignored

bundled deps handled by upstream in new versions
kinetic

ignored

end of life, was needs-triage
lunar

ignored

end of life, was ignored [bundled deps handled by upstream in new versions]
mantic

ignored

end of life, was ignored [bundled deps handled by upstream in new versions]

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

esm-apps-legacy/xenial

not-affected

uses system expat
esm-apps/bionic

not-affected

uses system expat
esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

not-affected

uses system expat
esm-infra/focal

DNE

focal

DNE

impish

DNE

jammy

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps-legacy/xenial

not-affected

uses system expat
esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

not-affected

uses system expat
esm-infra/focal

DNE

focal

DNE

impish

DNE

jammy

DNE

kinetic

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

not-affected

uses system expat
esm-apps-legacy/xenial

not-affected

uses system expat
esm-apps/bionic

not-affected

uses system expat
esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/resolute

not-affected

uses system expat
esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

uses system expat
esm-apps-legacy/xenial

released

1.33.14-1ubuntu1+esm1
esm-apps/bionic

released

1.33.14-8ubuntu0.18.04.1~esm1
esm-apps/focal

released

1.33.14-8ubuntu0.20.04.1~esm1
esm-apps/jammy

released

1.33.14-10ubuntu0.1~esm1
esm-apps/noble

released

1.33.14-12ubuntu0.1~esm1
esm-apps/resolute

not-affected

uses system expat
esm-apps/xenial

ignored

end of ESM support, was needed
esm-infra-legacy/trusty

released

1.33.06-0ubuntu1+esm1

Показывать по

EPSS

Процентиль: 98%
0.35867
Средний

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
redhat
больше 4 лет назад

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.

CVSS3: 9.8
nvd
больше 4 лет назад

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.

CVSS3: 9.8
msrc
больше 4 лет назад

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.

CVSS3: 9.8
debian
больше 4 лет назад

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to in ...

suse-cvrf
больше 4 лет назад

Security update for expat

EPSS

Процентиль: 98%
0.35867
Средний

7.5 High

CVSS2

9.8 Critical

CVSS3