Summary
Rhodri James discovered that Expat incorrectly handled memory when
processing certain malformed XML files. An attacker could possibly
use this issue to cause a crash or execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | expat | 2.1.0-7ubuntu0.16.04.5+esm6 |
Vulnerabilities 1
-
High 8.1
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
References
-
report
https://ubuntu.com/security/CVE-2022-40674