Known vulnerabilities in expat (Debian package)
Vendor:
Debian
Software:
expat (Debian package)
Software CPE:
cpe:2.3:o:debian:expat_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
22
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.8.2-1~deb13u1
2.2.0-2+deb9u4
2.2.0-2+deb9u5
2.2.6-2+deb10u4
2.2.6-2+deb10u5
2.2.6-2+deb10u6
2.2.6-2+deb10u7
2.2.10-2
2.2.10-2+deb11u3
2.2.10-2+deb11u6
2.2.10-2+deb11u7
2.3.0-1
2.4.1-1
2.4.1-2
2.4.1-3
2.4.2-1
2.4.3-1
2.4.3-2
2.4.3-3
2.4.4-1
2.4.5-1
2.4.5-2
2.4.6-1
2.4.7-1
2.4.8-1
2.4.8-2
2.4.9-1
2.5.0-1
2.5.0-1+deb12u2
2.5.0-2
2.6.0-1
2.6.1-1
2.6.1-2
2.6.2-1
2.6.2-2
2.6.3-1
2.6.3-2
2.6.4-1
2.7.0-1
2.7.1-1
2.7.1-2
2.5.0-1+deb12u1
2.2.10-2+deb11u5
2.2.10-2+deb11u4
2.2.10-2+deb11u2
2.2.6-2+deb10u3
2.2.10-2+deb11u1
2.2.6-2+deb10u2
2.2.10
2.2.10-1
2.0.1-7+b1
2.0.1-7+b100
2.0.1-7.2+b1
2.1.0-1+b1
2.1.0-4+b1
2.1.0-6+b1
2.1.0-6+b2
2.1.0-6+b3
2.1.1-1+b1
2.2.0-1+b1
2.2.5-3+b1
2.2.9
2.2.6
2.2.0
2.1.0
2.2.9-1
2.1.0-6+deb8u6
2.2.0-2+deb9u3
2.2.6-2+deb10u1
2.2.7-2
2.2.7-1
2.1.0-6+deb8u5
2.2.0-2+deb9u2
2.2.6-2
1.95.8-3.4+etch1
1.95.8-3.4+etch2
1.95.8-3.4+etch3
2.0.1-4+lenny1
2.0.1-4+lenny2
2.0.1-4+lenny3
2.1.0-1+deb7u3
2.1.0-1+deb7u4
2.1.0-1+deb7u5
2.2.6-1
2.2.5-3
2.2.5-2
2.2.5-1
2.2.3-2
2.2.3-1
2.2.0-2+deb9u1
2.2.1-1
2.2.1-2
2.2.1-3
2.2.2-1
2.2.2-2
2.1.0-7
2.1.1-1
2.1.1-2
2.1.1-3
2.2.0-1
2.2.0-2
2.1.0-6+deb8u4
2.1.0-6+deb8u3~kbsd8u1
2.1.0-3
2.1.0-4
2.1.0-5
2.1.0-6
2.1.0-6+deb8u1
2.1.0-6+deb8u2
2.1.0-6+deb8u3
2.1.0-2
2.0.1-7.1
2.0.1-7.2
2.0.1-7.2ubuntu1
2.1.0~beta3-1
2.1.0~beta3-2
2.1.0-1
2.1.0-1+deb7u1
2.1.0-1+deb7u2
2.0.1-7+squeeze2
1.0-1
1.0-2
1.0.2-1
1.1-1
1.1-2
1.1-3
1.95.1-1
1.95.1-2
1.95.1-3
1.95.1-4
1.95.1-5
1.95.1-6
1.95.2-1
1.95.2-2
1.95.2-2.1
1.95.2-3
1.95.2-4
1.95.2-5
1.95.2-6
1.95.2-7
1.95.2-8
1.95.2-9
1.95.2-10
1.95.5-1
1.95.6-1
1.95.6-2
1.95.6-3
1.95.6-4
1.95.6-5
1.95.6-6
1.95.6-7
1.95.6-8
1.95.8-1
1.95.8-2
1.95.8-3
1.95.8-3.1
1.95.8-3.2
1.95.8-3.3
1.95.8-3.4
1.95.8-4
1.95.8-4ubuntu1
2.0.1-0ubuntu1
2.0.1-1
2.0.1-2
2.0.1-3
2.0.1-4
2.0.1-5
2.0.1-6
2.0.1-7
2.0.1-7+squeeze1
Vulnerabilities (22)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU96899 - Integer overflow CVE-2024-45492 |
CWE-190 | High | 2.5.0-1+deb12u1 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 108 more |
||
| #VU96898 - Integer overflow CVE-2024-45491 |
CWE-190 | High | 2.5.0-1+deb12u1 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 106 more |
||
| #VU96897 - Buffer Underwrite ('Buffer Underflow') CVE-2024-45490 |
CWE-124 | High | 2.5.0-1+deb12u1 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 113 more |
||
| #VU68718 - Use After Free CVE-2022-43680 |
CWE-416 | Medium | 2.2.10-2+deb11u5 | 25.10.2022 |
SB2022102560 SB2022102566 SB2022103010 and 98 more |
||
| #VU67532 - Use After Free CVE-2022-40674 |
CWE-416 | High | 2.2.10-2+deb11u4 | 21.09.2022 |
SB2022092118 SB2022092119 SB2022092317 and 111 more |
||
| #VU60739 - Integer overflow CVE-2022-25315 |
CWE-190 | High | 2.2.6-2+deb10u3, 2.2.10-2+deb11u2 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 99 more |
||
| #VU60738 - Integer overflow CVE-2022-25314 |
CWE-190 | Medium | 2.2.6-2+deb10u3, 2.2.10-2+deb11u2 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 68 more |
||
| #VU60737 - Stack-based buffer overflow CVE-2022-25313 |
CWE-121 | High | 2.2.6-2+deb10u3, 2.2.10-2+deb11u2 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 64 more |
||
| #VU60736 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25235 |
CWE-94 | High | 2.2.6-2+deb10u3, 2.2.10-2+deb11u2 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 106 more |
||
| #VU60733 - Improper input validation CVE-2022-25236 |
CWE-20 | Medium | 2.2.6-2+deb10u3, 2.2.10-2+deb11u2 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 109 more |
||
| #VU60114 - Integer overflow CVE-2022-23990 |
CWE-190 | High | 2.2.6-2+deb10u2, 2.2.10-2+deb11u1 | 28.01.2022 |
SB2022012504 SB2022012804 SB2022020902 and 46 more |
||
| #VU59966 - Integer overflow CVE-2022-23852 |
CWE-190 | High | 2.2.6-2+deb10u2, 2.2.10-2+deb11u1 | 25.01.2022 |
SB2022012504 SB2022012622 SB2022020902 and 58 more |
||
| #VU59650 - Integer overflow CVE-2022-22827 |
CWE-190 | High | 2.2.6-2+deb10u2, 2.2.10-2+deb11u1 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 54 more |
||
| #VU59649 - Integer overflow CVE-2022-22826 |
CWE-190 | High | 2.2.6-2+deb10u2, 2.2.10-2+deb11u1 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 54 more |
||
| #VU59648 - Integer overflow CVE-2022-22825 |
CWE-190 | High | 2.2.6-2+deb10u2, 2.2.10-2+deb11u1 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 56 more |
||
| #VU59647 - Integer overflow CVE-2022-22824 |
CWE-190 | High | 2.2.6-2+deb10u2, 2.2.10-2+deb11u1 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 57 more |
||
| #VU59646 - Integer overflow CVE-2022-22823 |
CWE-190 | High | 2.2.6-2+deb10u2, 2.2.10-2+deb11u1 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 57 more |
||
| #VU59645 - Integer overflow CVE-2022-22822 |
CWE-190 | High | 2.2.6-2+deb10u2, 2.2.10-2+deb11u1 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 59 more |
||
| #VU59643 - Integer overflow CVE-2021-46143 |
CWE-190 | High | 2.2.6-2+deb10u2, 2.2.10-2+deb11u1 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 58 more |
||
| #VU59642 - Resource exhaustion CVE-2021-45960 |
CWE-400 | Medium | 2.2.6-2+deb10u2, 2.2.10-2+deb11u1 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 56 more |
Showing elements 1 - 20 out of 22