CVE-2021-45960

תיאור (מקור, אנגלית)

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).

מדדים

CVSS 3.1

8.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

5% (אחוזון 100) נכון ל-28/10/2026

CWE

CWE-682

מוצרים מושפעים

libexpat_project: libexpat; tenable: nessus; debian: debian linux; siemens: sinema remote connect server; netapp: active iq unified manager; netapp: hci baseboard management controller; netapp: oncommand workflow automation; netapp: solidfire \& hci management node

קישורים

• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf PatchThird Party Advisory
• https://github.com/libexpat/libexpat/issues/531 ExploitIssue TrackingPatchThird Party Advisory
• https://github.com/libexpat/libexpat/pull/534 PatchThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf PatchThird Party Advisory
• https://github.com/libexpat/libexpat/issues/531 ExploitIssue TrackingPatchThird Party Advisory
• https://github.com/libexpat/libexpat/pull/534 PatchThird Party Advisory
• http://www.openwall.com/lists/oss-security/2022/01/17/3 ExploitMailing ListThird Party Advisory
• http://www.openwall.com/lists/oss-security/2022/01/17/3 ExploitMailing ListThird Party Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1217609 Issue TrackingPermissions RequiredThird Party Advisory
• https://security.gentoo.org/glsa/202209-24 Third Party Advisory