Known vulnerabilities in expat (Debian package) 2.2.0-2+deb9u2

Vendor: Debian
Version: 2.2.0-2+deb9u2
Software CPE: cpe:2.3:o:debian:expat_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 16
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting expat (Debian package) version 2.2.0-2+deb9u2 expat (Debian package) 2.2.0-2+deb9u2 is affected by 16 vulnerabilities: 12 high, 4 medium Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60739 - Integer overflow
CVE-2022-25315
CWE-190 High
No
No
2.2.6-2+deb10u3, 2.2.10-2+deb11u2 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 99 more
#VU60738 - Integer overflow
CVE-2022-25314
CWE-190 Medium
No
No
2.2.6-2+deb10u3, 2.2.10-2+deb11u2 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU60737 - Stack-based buffer overflow
CVE-2022-25313
CWE-121 High
No
No
2.2.6-2+deb10u3, 2.2.10-2+deb11u2 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 64 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235
CWE-94 High
No
No
2.2.6-2+deb10u3, 2.2.10-2+deb11u2 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU60733 - Improper input validation
CVE-2022-25236
CWE-20 Medium
No
No
2.2.6-2+deb10u3, 2.2.10-2+deb11u2 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU60114 - Integer overflow
CVE-2022-23990
CWE-190 High
No
No
2.2.6-2+deb10u2, 2.2.10-2+deb11u1 28.01.2022 SB2022012504
SB2022012804
SB2022020902
and 46 more
#VU59966 - Integer overflow
CVE-2022-23852
CWE-190 High
No
No
2.2.6-2+deb10u2, 2.2.10-2+deb11u1 25.01.2022 SB2022012504
SB2022012622
SB2022020902
and 58 more
#VU59650 - Integer overflow
CVE-2022-22827
CWE-190 High
No
No
2.2.6-2+deb10u2, 2.2.10-2+deb11u1 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 54 more
#VU59649 - Integer overflow
CVE-2022-22826
CWE-190 High
No
No
2.2.6-2+deb10u2, 2.2.10-2+deb11u1 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 54 more
#VU59648 - Integer overflow
CVE-2022-22825
CWE-190 High
No
No
2.2.6-2+deb10u2, 2.2.10-2+deb11u1 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU59647 - Integer overflow
CVE-2022-22824
CWE-190 High
No
No
2.2.6-2+deb10u2, 2.2.10-2+deb11u1 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 57 more
#VU59646 - Integer overflow
CVE-2022-22823
CWE-190 High
No
No
2.2.6-2+deb10u2, 2.2.10-2+deb11u1 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 57 more
#VU59645 - Integer overflow
CVE-2022-22822
CWE-190 High
No
No
2.2.6-2+deb10u2, 2.2.10-2+deb11u1 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 59 more
#VU59643 - Integer overflow
CVE-2021-46143
CWE-190 High
No
No
2.2.6-2+deb10u2, 2.2.10-2+deb11u1 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 58 more
#VU59642 - Resource exhaustion
CVE-2021-45960
CWE-400 Medium
No
No
2.2.6-2+deb10u2, 2.2.10-2+deb11u1 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU21091 - Out-of-bounds read
CVE-2019-15903
CWE-125 Medium
Public exploit available
No
2.2.0-2+deb9u3, 2.2.6-2+deb10u1 12.09.2019 SB2019091209
SB2019091210
SB2019091701
and 61 more