PT-2021-6138 · Expat+12 · Expat+12
Hartwork
·
Published
2021-12-30
·
Updated
2026-04-01
·
CVE-2021-45960
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Expat (aka libexpat) versions prior to 2.4.3
Description
The issue is related to a left shift by 29 (or more) places in the
storeAtts function in xmlparse.c, which can lead to realloc misbehavior, such as allocating too few bytes or only freeing memory. This can cause a denial of service. Additionally, there is a mention of an integer overflow of addBinding in xmlparse.c, which could potentially allow a remote attacker to execute arbitrary code on the system by persuading a victim to open a specially-crafted file.Recommendations
For versions prior to 2.4.3, update to version 2.4.3 or later to resolve the issue. As a temporary workaround, consider disabling the
storeAtts function until a patch is available. Restrict access to specially-crafted files to minimize the risk of exploitation.Exploit
Fix
DoS
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Expat
Ibm Aix
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu