PT-2022-1366 · Expat+11 · Expat+11

Published

2022-01-26

·

Updated

2026-04-01

·

CVE-2022-23990

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Expat (aka libexpat) versions prior to 2.4.4
Description The issue is related to an integer overflow in the doProlog() function, which could allow a remote attacker to cause a denial of service. Additionally, there is a possible memory corruption due to an integer overflow in the closeString function of xmlparse.c, potentially leading to local escalation of privilege. An attacker could exploit this by persuading a victim to open a specially-crafted file, allowing for the execution of arbitrary code on the system.
Recommendations For Expat (aka libexpat) versions prior to 2.4.4, update to version 2.4.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the doProlog() function and the closeString function in xmlparse.c to minimize the risk of exploitation. Avoid using specially-crafted files that could trigger the integer overflow until the issue is resolved.

Fix

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2022:7811
ALT-PU-2022-1208
ALT-PU-2023-4107
ALT-PU-2023-4120
ALT-PU-2023-4144
ASB-A-221256678
AZL-8334
BDU:2022-00999
CESA-2022_7811
CLEANSTART-2026-EM10970
CLEANSTART-2026-MH09144
CLEANSTART-2026-YT18139
CVE-2022-23990
DLA-2904-1
DSA-5073-1
MGASA-2022-0048
OESA-2022-1511
OPENSUSE-SU-2022:0498-1
OPENSUSE-SU-2022_0498-1
OPENSUSE-SU-2024:11793-1
RHSA-2022:7811
RHSA-2022_7811
SUSE-SU-2022:0495-1
SUSE-SU-2022:0498-1
SUSE-SU-2022:14884-1
USN-5288-1

Affected Products

Alt Linux
Almalinux
Astra Linux
Centos
Debian
Expat
Ibm Aix
Linuxmint
Red Hat
Red Os
Suse
Ubuntu