p PatchFirst

CVE-2021-46143

CVE-2021-46143

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

CVSS 8.1 · High · EPSS 4.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • expat Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.4.3-1

    Update to 2.4.3-1

  • expat Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.4.3-1

    Update to 2.4.3-1

  • expat Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.4.3-1

    Update to 2.4.3-1

  • libxmltok Debian:12

    Versions
    • 1.2-4
    • 1.2-4.1
    • 1.2-4.1~exp1
    • 1.2-4.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • expat Ubuntu:Pro:14.04:LTS

    Versions
    • 2.1.0-4
    • 2.1.0-4ubuntu1
    • 2.1.0-4ubuntu1.1
    • 2.1.0-4ubuntu1.2
    • 2.1.0-4ubuntu1.3
    • 2.1.0-4ubuntu1.4
    • 2.1.0-4ubuntu1.4+esm1
    • 2.1.0-4ubuntu1.4+esm2
    Affected ranges
    • ECOSYSTEM: < 2.1.0-4ubuntu1.4+esm4

    Update to 2.1.0-4ubuntu1.4+esm4

  • coin3 Ubuntu:Pro:14.04:LTS

    Versions
    • 3.1.4~abc9f50-3
    • 3.1.4~abc9f50-4
    • 3.1.4~abc9f50-4ubuntu2
    • 3.1.4~abc9f50-4ubuntu2+esm1
    • 3.1.4~abc9f50-4ubuntu2+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poco Ubuntu:14.04:LTS

    Versions
    • 1.3.6p1-4
    • 1.3.6p1-4+deb7u1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vnc4 Ubuntu:Pro:14.04:LTS

    Versions
    • 4.1.1+xorg4.3.0-37ubuntu5
    • 4.1.1+xorg4.3.0-37ubuntu5.0.1
    • 4.1.1+xorg4.3.0-37ubuntu5.0.2
    • 4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vtk Ubuntu:Pro:14.04:LTS

    Versions
    • 5.8.0-14ubuntu1
    • 5.8.0-14ubuntu3
    • 5.8.0-14.1ubuntu2
    • 5.8.0-14.1ubuntu3
    • 5.8.0-14.1ubuntu3+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:14.04:LTS

    Versions
    • 1.16.33-3.2ubuntu3
    • 1.33.06-0ubuntu1
    • 1.33.06-0ubuntu1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • expat Ubuntu:Pro:16.04:LTS

    Versions
    • 2.1.0-7
    • 2.1.0-7ubuntu0.16.04.1
    • 2.1.0-7ubuntu0.16.04.2
    • 2.1.0-7ubuntu0.16.04.3
    • 2.1.0-7ubuntu0.16.04.4
    • 2.1.0-7ubuntu0.16.04.5
    Affected ranges
    • ECOSYSTEM: < 2.1.0-7ubuntu0.16.04.5+esm2

    Update to 2.1.0-7ubuntu0.16.04.5+esm2

  • libxmltok Ubuntu:Pro:16.04:LTS

    Versions
    • 1.2-3build3
    Affected ranges
    • ECOSYSTEM: < 1.2-3ubuntu0.16.04.1~esm1

    Update to 1.2-3ubuntu0.16.04.1~esm1

  • ayttm Ubuntu:Pro:16.04:LTS

    Versions
    • 0.6.3-3build1
    • 0.6.3-3ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cableswig Ubuntu:Pro:16.04:LTS

    Versions
    • 0.1.0+git20150808-1
    • 0.1.0+git20150808-2
    • 0.1.0+git20150808-2ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cadaver Ubuntu:16.04:LTS

    Versions
    • 0.23.3-2ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • coin3 Ubuntu:Pro:16.04:LTS

    Versions
    • 3.1.4~abc9f50+dfsg1-1
    • 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1
    • 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • emboss Ubuntu:16.04:LTS

    Versions
    • 6.6.0+dfsg-1
    • 6.6.0+dfsg-3
    • 6.6.0+dfsg-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ibm-3270 Ubuntu:16.04:LTS

    Versions
    • 3.3.14ga11-1
    • 3.3.14ga11-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit Ubuntu:Pro:16.04:LTS

    Versions
    • 3.20.1+git20120521-6
    • 3.20.1+git20120521-6build1
    • 3.20.1+git20120521-6ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:16.04:LTS

    Versions
    • 4.8.1-1ubuntu3
    • 4.8.1-1ubuntu4
    • 4.8.2-3.1ubuntu1
    • 4.9.0-3ubuntu2
    • 4.9.0-4ubuntu1
    • 4.9.0-4ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libsynthesis Ubuntu:16.04:LTS

    Versions
    • 3.4.0.47.5-0ubuntu3~gcc5.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mame Ubuntu:16.04:LTS

    Versions
    • 0.160-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • matanza Ubuntu:16.04:LTS

    Versions
    • 0.13+ds1-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →