תיאור (מקור, אנגלית)
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
מוצרים מושפעים
libexpat_project: libexpat; tenable: nessus; debian: debian linux; siemens: sinema remote connect server; netapp: active iq unified manager; netapp: hci baseboard management controller; netapp: oncommand workflow automation; netapp: solidfire \& hci management node
קישורים10
- cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf PatchThird Party Advisory
- github.com/libexpat/libexpat/issues/531 ExploitIssue TrackingPatchThird Party Advisory
- github.com/libexpat/libexpat/pull/534 PatchThird Party Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf PatchThird Party Advisory
- github.com/libexpat/libexpat/issues/531 ExploitIssue TrackingPatchThird Party Advisory
- github.com/libexpat/libexpat/pull/534 PatchThird Party Advisory
- www.openwall.com/lists/oss-security/2022/01/17/3 ExploitMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2022/01/17/3 ExploitMailing ListThird Party Advisory
- bugzilla.mozilla.org/show_bug.cgi?id=1217609 Issue TrackingPermissions RequiredThird Party Advisory
- security.gentoo.org/glsa/202209-24 Third Party Advisory
מדדים
- CVSS 3.1
-
8.8
HIGH
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 5% אחוזון 92 · נכון ל-4 בנובמבר 2026
- CWE
- CWE-682
האם אפשר לנצל את הפגיעות הזו אצלכם?
עדכון אבטחה סוגר את הפרצה הידועה. בדיקת חדירות מראה לאן תוקף עדיין יכול להגיע — עם הוכחה.