CVE-2022-25314
Summary
| CVE | CVE-2022-25314 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-02-18 05:15:00 UTC |
|---|
| Updated | 2023-11-07 03:44:00 UTC |
|---|
| Description | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Oracle Critical Patch Update Advisory - April 2022 |
MISC |
www.oracle.com |
|
| February 2022 Expat Vulnerabilities in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
|
| [CVE-2022-25314] lib: Prevent integer overflow in copyString by ferivoz · Pull Request #560 · libexpat/libexpat · GitHub |
MISC |
github.com |
Third Party Advisory |
| [SECURITY] Fedora 35 Update: mingw-expat-2.4.6-1.fc35 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] Fedora 35 Update: mingw-expat-2.4.6-1.fc35 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| oss-security - Expat 2.4.5 released, includes 5 security fixes |
MLIST |
www.openwall.com |
Mailing List, Third Party Advisory |
| [SECURITY] Fedora 34 Update: mingw-expat-2.4.6-1.fc34 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| Expat: Multiple Vulnerabilities (GLSA 202209-24) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| Debian -- Security Information -- DSA-5085-1 expat |
DEBIAN |
www.debian.org |
Third Party Advisory |
| cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf |
CONFIRM |
cert-portal.siemens.com |
|
| [SECURITY] Fedora 34 Update: mingw-expat-2.4.6-1.fc34 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159918 Oracle Enterprise Linux Security Update for expat (ELSA-2022-5314)
- 159925 Oracle Enterprise Linux Security Update for expat (ELSA-2022-5244)
- 179091 Debian Security Update for expat (DSA 5085-1)
- 182327 Debian Security Update for expat (CVE-2022-25314)
- 20259 IBM DB2 Multiple Vulnerabilities (6597637)
- 240497 Red Hat Update for expat (RHSA-2022:5244)
- 240505 Red Hat Update for expat (RHSA-2022:5314)
- 240794 Red Hat Update for JBoss Core Services (RHSA-2022:7143)
- 282449 Fedora Security Update for mingw (FEDORA-2022-3d9d67f558)
- 282450 Fedora Security Update for mingw (FEDORA-2022-04f206996b)
- 330124 IBM AIX Multiple Vulnerabilities in Python (python_advisory)
- 354434 Amazon Linux Security Advisory for expat : ALAS2022-2022-232
- 354490 Amazon Linux Security Advisory for expat : ALAS2022-2022-036
- 354570 Amazon Linux Security Advisory for expat : ALAS-2022-232
- 355281 Amazon Linux Security Advisory for expat : ALAS2023-2023-058
- 377580 Alibaba Cloud Linux Security Update for expat (ALINUX3-SA-2022:0128)
- 377786 Alibaba Cloud Linux Security Update for mingw-expat (ALINUX3-SA-2022:0183)
- 38862 NetApp Data Open Network Technology for Appliance Products (ONTAP) Denial of Service (DoS) Vulnerability (NTAP-20210303-0002)
- 44025 Juniper Network Operating System (Junos OS) Multiple Vulnerabilities (JSA70605)
- 500179 Alpine Linux Security Update for expat
- 501402 Alpine Linux Security Update for expat
- 501740 Alpine Linux Security Update for expat
- 503916 Alpine Linux Security Update for expat
- 591406 Siemens SIMATIC S7-1500 CPU GNU/Linux subsystem Multiple Vulnerabilities (SSB-439005, ICSA-22-104-13)
- 610429 Google Android Devices September 2022 Security Patch Missing
- 610431 Google Android September 2022 Security Patch Missing for Samsung
- 610439 Google Android October 2022 Security Patch Missing for Huawei EMUI
- 6140144 AWS Bottlerocket Security Update for libexpat (GHSA-q6jm-mm6c-r7m4)
- 671588 EulerOS Security Update for expat (EulerOS-SA-2022-1562)
- 671757 EulerOS Security Update for expat (EulerOS-SA-2022-1786)
- 671760 EulerOS Security Update for expat (EulerOS-SA-2022-1803)
- 671787 EulerOS Security Update for expat (EulerOS-SA-2022-1861)
- 671796 EulerOS Security Update for expat (EulerOS-SA-2022-1837)
- 710626 Gentoo Linux Expat Multiple Vulnerabilities (GLSA 202209-24)
- 751782 SUSE Enterprise Linux Security Update for expat (SUSE-SU-2022:0698-1)
- 751795 SUSE Enterprise Linux Security Update for expat (SUSE-SU-2022:0713-1)
- 751810 OpenSUSE Security Update for expat (openSUSE-SU-2022:0713-1)
- 752302 SUSE Enterprise Linux Security Update for expat (SUSE-SU-2022:2294-1)
- 753324 SUSE Enterprise Linux Security Update for expat (SUSE-SU-2022:14903-1)
- 900690 Common Base Linux Mariner (CBL-Mariner) Security Update for expat (8630)
- 901586 Common Base Linux Mariner (CBL-Mariner) Security Update for expat (8624-1)
- 940591 AlmaLinux Security Update for expat (ALSA-2022:5314)
- 940631 AlmaLinux Security Update for expat (ALSA-2022:5244)
- 940738 AlmaLinux Security Update for mingw-expat (ALSA-2022:7811)
- 960442 Rocky Linux Security Update for expat (RLSA-2022:5314)
