expat: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 2

• Critical 9.8
  CVE-2022-25235 Public exploit

  xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a U…

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 16, 2022
• Critical 9.8
  CVE-2022-25236 Public exploit EPSS 35%

  xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespac…

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 16, 2022

Revision history

1. 2026-05-27 #54

   Neue Updates von Ubuntu aufgenommen

2. 2026-05-26 #53

   Neue Updates von Ubuntu aufgenommen

3. 2026-05-06 #52

   Neue Updates von Ubuntu aufgenommen

4. 2025-11-09 #51

   Neue Updates von openSUSE aufgenommen

5. 2024-05-01 #50

   Neue Updates von SUSE aufgenommen

6. 2024-04-24 #49

   Neue Updates von HP aufgenommen

7. 2024-04-16 #48

   Neue Updates von BROCADE aufgenommen

8. 2024-04-15 #47

   Neue Updates von BROCADE aufgenommen

9. 2023-08-17 #46

   Neue Updates von ORACLE aufgenommen

10. 2023-08-13 #45

    Neue Updates von HP aufgenommen

11. 2023-05-09 #44

    Neue Updates von Tenable aufgenommen

12. 2023-04-12 #43

    Neue Updates von Juniper aufgenommen

13. 2022-12-11 #42

    Neue Updates von Amazon aufgenommen

14. 2022-11-08 #41

    Neue Updates von Red Hat aufgenommen

15. 2022-10-26 #40

    Neue Updates von Red Hat und Oracle Linux aufgenommen

16. 2022-10-12 #39

    Neue Updates aufgenommen

17. 2022-09-29 #38

    Neue Updates von Gentoo aufgenommen

18. 2022-08-01 #37

    Neue Updates von Autodesk aufgenommen

19. 2022-07-24 #36

    Neue Updates von HP aufgenommen

20. 2022-07-06 #35

    Neue Updates von SUSE aufgenommen

21. 2022-06-02 #34

    Neue Updates von Aruba aufgenommen

22. 2022-05-26 #33

    Neue Updates von Tenable aufgenommen

23. 2022-05-24 #32

    Neue Updates von Amazon aufgenommen

24. 2022-05-19 #31

    Neue Updates von Amazon aufgenommen

25. 2022-05-17 #30

    Neue Updates von AVAYA aufgenommen

References

• Aruba Product Security Advisory ARUBA-PSA-2022-010 vom 2022-06-03
  https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-010.txt
• AVAYA Security Advisory ASA-2022-067 vom 2022-05-16
  https://downloads.avaya.com/css/P8/documents/101081824
• AVAYA Security Advisory ASA-2022-068 vom 2022-05-16
  https://downloads.avaya.com/css/P8/documents/101081825
• Amazon Linux Security Advisory ALAS-2022-080 vom 2022-05-20
  https://alas.aws.amazon.com/AL2022/ALAS-2022-080.html
• National Vulnerability Database vom 2022-02-15
  https://nvd.nist.gov/vuln/detail/CVE-2022-25235
• National Vulnerability Database vom 2022-02-15
  https://nvd.nist.gov/vuln/detail/CVE-2022-25236
• Ubuntu Security Notice USN-5288-1 vom 2022-02-21
  https://ubuntu.com/security/notices/USN-5288-1
• Debian Security Advisory DSA-5085 vom 2022-02-22
  https://lists.debian.org/debian-security-announce/2022/msg00052.html
• OpenBSD 7.0 errata
  https://ftp.openbsd.org/pub/OpenBSD/patches/7.0/common/015_expat.patch.sig
• Tenable Security Advisory
  https://www.tenable.com/security/tns-2022-11
• Tenable Security Advisory
  https://www.tenable.com/security/tns-2022-12
• NetApp Security Advisory NTAP-20220303-0008 vom 2022-03-03
  https://security.netapp.com/advisory/ntap-20220303-0008/
• SUSE Security Update SUSE-SU-2022:0698-1 vom 2022-03-03
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010336.html
• SUSE Security Update SUSE-SU-2022:0713-1 vom 2022-03-04
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010357.html
• SUSE Security Update SUSE-SU-2022:14903-1 vom 2022-03-04
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010361.html
• Debian Security Advisory DLA-2935 vom 2022-03-07
  https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
• Amazon Linux Security Advisory ALAS-2022-1573 vom 2022-03-11
  https://alas.aws.amazon.com/ALAS-2022-1573.html
• Ubuntu Security Notice USN-5320-1 vom 2022-03-10
  https://ubuntu.com/security/notices/USN-5320-1
• Amazon Linux Security Advisory ALAS-2022-1764 vom 2022-03-10
  https://alas.aws.amazon.com/AL2/ALAS-2022-1764.html
• Red Hat Security Advisory RHSA-2022:0824 vom 2022-03-10
  https://access.redhat.com/errata/RHSA-2022:0824
• Red Hat Security Advisory RHSA-2022:0817 vom 2022-03-10
  https://access.redhat.com/errata/RHSA-2022:0817
• Red Hat Security Advisory RHSA-2022:0818 vom 2022-03-10
  https://access.redhat.com/errata/RHSA-2022:0818
• Red Hat Security Advisory RHSA-2022:0816 vom 2022-03-10
  https://access.redhat.com/errata/RHSA-2022:0816
• Red Hat Security Advisory RHSA-2022:0815 vom 2022-03-10
  https://access.redhat.com/errata/RHSA-2022:0815
• Red Hat Security Advisory RHSA-2022:0853 vom 2022-03-14
  https://access.redhat.com/errata/RHSA-2022:0853
• Oracle Linux Security Advisory ELSA-2022-0850 vom 2022-03-14
  http://linux.oracle.com/errata/ELSA-2022-0850.html
• Red Hat Security Advisory RHSA-2022:0847 vom 2022-03-14
  https://access.redhat.com/errata/RHSA-2022:0847
• Red Hat Security Advisory RHSA-2022:0850 vom 2022-03-14
  https://access.redhat.com/errata/RHSA-2022:0850
• Oracle Linux Security Advisory ELSA-2022-0845 vom 2022-03-14
  http://linux.oracle.com/errata/ELSA-2022-0845.html
• Red Hat Security Advisory RHSA-2022:0843 vom 2022-03-14
  https://access.redhat.com/errata/RHSA-2022:0843
• Red Hat Security Advisory RHSA-2022:0845 vom 2022-03-14
  https://access.redhat.com/errata/RHSA-2022:0845
• Amazon Linux Security Advisory ALAS-2022-1585 vom 2022-05-24
  https://alas.aws.amazon.com/ALAS-2022-1585.html
• Amazon Linux Security Advisory ALAS-2022-1795 vom 2022-05-24
  https://alas.aws.amazon.com/AL2/ALAS-2022-1795.html
• SUSE Security Update SUSE-SU-2022:0844-1 vom 2022-03-15
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010445.html
• SUSE Security Update SUSE-SU-2022:0842-1 vom 2022-03-15
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010442.html
• Red Hat Security Advisory RHSA-2022:0951 vom 2022-03-16
  https://access.redhat.com/errata/RHSA-2022:0951
• Oracle Linux Security Advisory ELSA-2022-0951 vom 2022-03-17
  http://linux.oracle.com/errata/ELSA-2022-0951.html
• AVAYA Security Advisory ASA-2022-031 vom 2022-03-17
  https://downloads.avaya.com/css/P8/documents/101080937
• Red Hat Security Advisory RHSA-2022:1012 vom 2022-03-22
  https://access.redhat.com/errata/RHSA-2022:1012
• Red Hat Security Advisory RHSA-2022:1053 vom 2022-03-24
  https://access.redhat.com/errata/RHSA-2022:1053
• Red Hat Security Advisory RHSA-2022:1068 vom 2022-03-28
  https://access.redhat.com/errata/RHSA-2022:1068
• Red Hat Security Advisory RHSA-2022:1069 vom 2022-03-28
  https://access.redhat.com/errata/RHSA-2022:1069
• Red Hat Security Advisory RHSA-2022:1070 vom 2022-03-28
  https://access.redhat.com/errata/RHSA-2022:1070
• Oracle Linux Security Advisory ELSA-2022-1069 vom 2022-03-28
  http://linux.oracle.com/errata/ELSA-2022-1069.html
• SUSE Security Update SUSE-SU-2022:14934-1 vom 2022-03-31
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010614.html
• Meinberg Security Advisory MBGSA-2022.01 vom 2022-04-05
  https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2022-01-meinberg-lantime-firmware-v7-04-015-und-v6-24-030.htm
• Red Hat Security Advisory RHSA-2022:1263 vom 2022-04-07
  https://access.redhat.com/errata/RHSA-2022:1263
• Red Hat Security Advisory RHSA-2022:1309 vom 2022-04-12
  https://access.redhat.com/errata/RHSA-2022:1309
• SUSE Security Update SUSE-SU-2022:0844-2 vom 2022-04-20
  https://lists.suse.com/pipermail/sle-security-updates/2022-April/010758.html
• Red Hat Security Advisory RHSA-2022:1476 vom 2022-04-21
  https://access.redhat.com/errata/RHSA-2022:1476
• Red Hat Security Advisory RHSA-2022:1539 vom 2022-04-26
  https://access.redhat.com/errata/RHSA-2022:1539
• Red Hat Security Advisory RHSA-2022:1540 vom 2022-04-26
  https://access.redhat.com/errata/RHSA-2022:1540
• Red Hat Security Advisory RHSA-2022:1643 vom 2022-04-29
  https://access.redhat.com/errata/RHSA-2022:1643
• Red Hat Security Advisory RHSA-2022:1644 vom 2022-04-29
  https://access.redhat.com/errata/RHSA-2022:1644
• F5 Security Advisory K19473898 vom 2022-04-30
  https://support.f5.com/csp/article/K19473898
• Oracle Linux Security Advisory ELSA-2022-1643 vom 2022-05-02
  http://linux.oracle.com/errata/ELSA-2022-1643.html
• Red Hat Security Advisory RHSA-2022:1622 vom 2022-05-04
  https://access.redhat.com/errata/RHSA-2022:1622
• Oracle Linux Security Advisory ELSA-2022-9359 vom 2022-05-06
  https://linux.oracle.com/errata/ELSA-2022-9359.html
• SUSE Security Update SUSE-SU-2022:2294-1 vom 2022-07-06
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011419.html
• HPE Security Bulltein
  https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbnw04308en_us&hprpt_id=ALERT_HPE_3029170&jumpid=em_pom8nu6hj_aid-520066529
• Autodesk Security Advisory ADSK-SA-2022-0017 vom 2022-08-02
  https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0017
• Gentoo Linux Security Advisory GLSA-202209-24 vom 2022-09-29
  https://security.gentoo.org/glsa/202209-24
• Juniper Security Bulletin
  https://supportportal.juniper.net/s/article/2022-10-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-22-2R1-release
• Red Hat Security Advisory RHSA-2022:7143 vom 2022-10-27
  https://access.redhat.com/errata/RHSA-2022:7143
• Red Hat Security Advisory RHSA-2022:7144 vom 2022-10-27
  https://access.redhat.com/errata/RHSA-2022:7144
• Oracle Linux Security Advisory ELSA-2022-6997 vom 2022-10-27
  https://linux.oracle.com/errata/ELSA-2022-6997.html
• Oracle Linux Security Advisory ELSA-2022-6711 vom 2022-10-27
  https://linux.oracle.com/errata/ELSA-2022-6711.html
• Oracle Linux Security Advisory ELSA-2022-7069 vom 2022-10-27
  https://linux.oracle.com/errata/ELSA-2022-7069.html
• Red Hat Security Advisory RHSA-2022:7811 vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7811
• Amazon Linux Security Advisory ALAS-2022-232 vom 2022-12-09
  https://alas.aws.amazon.com/AL2022/ALAS-2022-232.html
• Juniper Security Bulletin vom 2023-04-13
  https://supportportal.juniper.net/s/article/2023-04-Security-Bulletin-Junos-OS-Multiple-vulnerabilities-in-expat-resolved?language=en_US
• Tenable Security Advisory TNS-2023-19 vom 2023-05-10
  https://www.tenable.com/security/tns-2023-19
• HPE Securi+y Bulletin
  https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbst04494en_us
• ORACLE OVMSA-2023-0009 vom 2023-08-17
  https://oss.oracle.com/pipermail/oraclevm-errata/2023-August/001078.html
• Brocade Security Advisory BSA-2023-1869 vom 2024-04-16
  https://support.broadcom.com/external/content/SecurityAdvisories/0/22402
• Brocade Security Advisory BSA-2023-1868 vom 2024-04-16
  https://support.broadcom.com/external/content/SecurityAdvisories/0/22403
• HPE Security Bulletin vom 2024-04-25
  https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04635en_us&docLocale=en_US
• Broadcom Security Advisory vom 2024-04-30
  https://support.broadcom.com/external/content/SecurityAdvisories/0/23299
• SUSE Security Update SUSE-SU-2024:0782-2 vom 2024-04-30
  https://lists.suse.com/pipermail/sle-security-updates/2024-April/018443.html
• openSUSE Security Update OPENSUSE-SU-2025:15713-1 vom 2025-11-08
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V7NUQ3GPXSJ6QCFNNBJQ5D3UZXUYCUBE/