PT-2022-1366 · Expat+11 · Expat+11
Published
2022-01-26
·
Updated
2026-04-01
·
CVE-2022-23990
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Expat (aka libexpat) versions prior to 2.4.4
Description
The issue is related to an integer overflow in the
doProlog() function, which could allow a remote attacker to cause a denial of service. Additionally, there is a possible memory corruption due to an integer overflow in the closeString function of xmlparse.c, potentially leading to local escalation of privilege. An attacker could exploit this by persuading a victim to open a specially-crafted file, allowing for the execution of arbitrary code on the system.Recommendations
For Expat (aka libexpat) versions prior to 2.4.4, update to version 2.4.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
doProlog() function and the closeString function in xmlparse.c to minimize the risk of exploitation. Avoid using specially-crafted files that could trigger the integer overflow until the issue is resolved.Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Expat
Ibm Aix
Linuxmint
Red Hat
Red Os
Suse
Ubuntu