p PatchFirst

CVE-2022-23990

CVE-2022-23990

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

CVSS 7.5 · High · EPSS 4.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • expat Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.4.3-3

    Update to 2.4.3-3

  • expat Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.4.3-3

    Update to 2.4.3-3

  • expat Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.4.3-3

    Update to 2.4.3-3

  • libxmltok Debian:12

    Versions
    • 1.2-4
    • 1.2-4.1
    • 1.2-4.1~exp1
    • 1.2-4.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • expat Ubuntu:Pro:14.04:LTS

    Versions
    • 2.1.0-4
    • 2.1.0-4ubuntu1
    • 2.1.0-4ubuntu1.1
    • 2.1.0-4ubuntu1.2
    • 2.1.0-4ubuntu1.3
    • 2.1.0-4ubuntu1.4
    • 2.1.0-4ubuntu1.4+esm1
    • 2.1.0-4ubuntu1.4+esm2
    Affected ranges
    • ECOSYSTEM: < 2.1.0-4ubuntu1.4+esm4

    Update to 2.1.0-4ubuntu1.4+esm4

  • coin3 Ubuntu:Pro:14.04:LTS

    Versions
    • 3.1.4~abc9f50-3
    • 3.1.4~abc9f50-4
    • 3.1.4~abc9f50-4ubuntu2
    • 3.1.4~abc9f50-4ubuntu2+esm1
    • 3.1.4~abc9f50-4ubuntu2+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • expat Ubuntu:Pro:16.04:LTS

    Versions
    • 2.1.0-7
    • 2.1.0-7ubuntu0.16.04.1
    • 2.1.0-7ubuntu0.16.04.2
    • 2.1.0-7ubuntu0.16.04.3
    • 2.1.0-7ubuntu0.16.04.4
    • 2.1.0-7ubuntu0.16.04.5
    Affected ranges
    • ECOSYSTEM: < 2.1.0-7ubuntu0.16.04.5+esm2

    Update to 2.1.0-7ubuntu0.16.04.5+esm2

  • coin3 Ubuntu:Pro:16.04:LTS

    Versions
    • 3.1.4~abc9f50+dfsg1-1
    • 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1
    • 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • matanza Ubuntu:16.04:LTS

    Versions
    • 0.13+ds1-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tdom Ubuntu:16.04:LTS

    Versions
    • 0.8.3-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • wbxml2 Ubuntu:16.04:LTS

    Versions
    • 0.10.7-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • expat Ubuntu:18.04:LTS

    Versions
    • 2.2.3-1
    • 2.2.3-2
    • 2.2.5-0ubuntu2
    • 2.2.5-3
    • 2.2.5-3ubuntu0.1
    • 2.2.5-3ubuntu0.2
    Affected ranges
    • ECOSYSTEM: < 2.2.5-3ubuntu0.4

    Update to 2.2.5-3ubuntu0.4

  • coin3 Ubuntu:Pro:18.04:LTS

    Versions
    • 3.1.4~abc9f50+dfsg1-2
    • 3.1.4~abc9f50+dfsg2-1
    • 3.1.4~abc9f50+dfsg3-1
    • 3.1.4~abc9f50+dfsg3-2
    • 3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • matanza Ubuntu:18.04:LTS

    Versions
    • 0.13+ds1-5build1
    • 0.13+ds1-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tdom Ubuntu:18.04:LTS

    Versions
    • 0.8.3-1
    • 0.9.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • wbxml2 Ubuntu:18.04:LTS

    Versions
    • 0.10.7-1
    • 0.10.7-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • expat Ubuntu:20.04:LTS

    Versions
    • 2.2.7-2
    • 2.2.9-1
    • 2.2.9-1build1
    Affected ranges
    • ECOSYSTEM: < 2.2.9-1ubuntu0.2

    Update to 2.2.9-1ubuntu0.2

  • matanza Ubuntu:20.04:LTS

    Versions
    • 0.13+ds1-6
    • 0.13+ds2-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tdom Ubuntu:20.04:LTS

    Versions
    • 0.9.1-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • wbxml2 Ubuntu:20.04:LTS

    Versions
    • 0.10.7-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cadaver Ubuntu:22.04:LTS

    Versions
    • 0.23.3-2.1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • firefox Ubuntu:22.04:LTS

    Versions
    • 93.0+build1-0ubuntu3
    • 94.0+build3-0ubuntu1
    • 94.0.2+build1-0ubuntu1
    • 94.0.2+build2-0ubuntu1
    • 95.0+build1-0ubuntu1
    • 95.0.1+build2-0ubuntu1
    • 95.0.2+build1-0ubuntu1
    • 96.0+build2-0ubuntu1
    • 96.0.1+build1-0ubuntu1
    • 96.0.2+build1-0ubuntu1
    • 96.0.3+build1-0ubuntu1
    • 97.0+build1-0ubuntu1
    • 97.0+build2-0ubuntu1
    • 97.0.1+build1-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 1:1snap1-0ubuntu1

    Update to 1:1snap1-0ubuntu1

  • matanza Ubuntu:22.04:LTS

    Versions
    • 0.13+ds2-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →