CVE-2022-23852

Description

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.

CVSS breakdown

Affected products

• Debian / debian_linux9.0 – 9.0
• libexpat project / libexpat2.4.4
• NetApp / Clustered Data ONTAP
• NetApp / OnCommand Workflow Automation
• oracle / communications_metasolv_solution6.3.1 – 6.3.1
• Siemens / SINEMA Remote Connect Server3.1
• tenable / Nessus8.15.3

References

• PATCHhttps://github.com/libexpat/libexpat/pull/550
• VENDOR_ADVISORYhttps://www.debian.org/security/2022/dsa-5073
• MAILING_LISThttps://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
• VENDOR_ADVISORYhttps://www.oracle.com/security-alerts/cpuapr2022.html
• MISChttps://www.tenable.com/security/tns-2022-05
• MISChttps://security.netapp.com/advisory/ntap-20220217-0001/
• MISChttps://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
• MISChttps://security.gentoo.org/glsa/202209-24