Known vulnerabilities in expat (Red Hat package)
Vendor:
Red Hat Inc.
Software:
expat (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:expat_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
29
Public exploits:
2
Known exploited (KEV):
0
Breakdown by Severity Chart
2.5.0-6.el9_8.5
2.5.0-4.el8_10
2.5.0-6.el9_8.3
2.5.0-6.el9_8.1
2.5.0-2.el8_10
2.5.0-6.el9
2.2.10-1.el8_6
2.2.10-1.el8_4
2.2.10-1.el8_8
2.5.0-5.el9_7.1
2.2.10-12.el9_0.4
2.5.0-1.el9_2.3
2.5.0-1.el8_10
2.5.0-5.el9_6.1
2.7.1-1.el10_1.3
2.7.1-1.el10_0.3
2.5.0-5.el9_6
2.5.0-3.el9_5.3
2.5.0-1.el9_2.2
2.5.0-2.el9_4.2
2.5.0-3.el9_5.1
2.2.5-16.el8_10
2.2.5-15.el8_10
2.5.0-2.el9_4.1
1.95.7-4.el4_8.2
1.95.8-8.3.el5_4.2
2.5.0-1.el9_2.1
2.2.5-8.el8_6.5
2.2.5-11.el8_8.2
2.2.5-11.el8_9.1
2.5.0-1.el9_3.1
2.2.5-8.el8_6.4
2.4.9-1.el9_1.1
2.2.5-10.el8_7.1
2.0.1-15.el6_10
2.2.5-8.el8_6.3
2.2.10-12.el9_0.3
2.1.0-15.el7_9
2.2.5-3.el8_2.3
2.2.5-4.el8_4.4
2.2.5-3.el8_1.2
2.2.10-12.el9_0.2
2.2.5-8.el8_6.2
2.2.5-4.el8_4.3
2.0.1-14.el6_10
2.2.5-3.el8_1.1
2.2.5-3.el8_2.2
2.1.0-14.el7_9
2.2.5-4.el8_4.2
2.2.5-4.el8_5.3
2.2.5-4.el8
2.1.0-12.el7
2.1.0-11.el7_7
2.1.0-11.el7
1.95.8-11.el5_8
2.1.0-10.el7_3
2.0.1-13.el6_8
2.0.1-11.el6_2
Vulnerabilities (29)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU149949 - Inefficient Algorithmic Complexity CVE-2026-45186 |
CWE-407 | Medium | 2.5.0-2.el8_10 | 15.09.2026 |
SB2026091528 SB2026091538 SB2026091546 and 9 more |
||
| #VU115751 - Resource exhaustion CVE-2025-59375 |
CWE-400 | Medium | 2.2.10-1.el8_4, 2.2.10-1.el8_6, 2.2.10-1.el8_8, 2.2.10-12.el9_0.4, 2.5.0-1.el8_10, 2.5.0-1.el9_2.3, 2.5.0-5.el9_6.1, 2.5.0-5.el9_7.1, 2.7.1-1.el10_0.3, 2.7.1-1.el10_1.3 | 17.09.2025 |
SB2025091783 SB2025091789 SB2025091790 and 112 more |
||
| #VU105723 - Stack-based buffer overflow CVE-2024-8176 |
CWE-121 | High | 2.2.10-1.el8_4, 2.2.10-1.el8_6, 2.2.10-1.el8_8, 2.2.10-12.el9_0.4, 2.5.0-1.el9_2.3, 2.5.0-3.el9_5.3, 2.5.0-5.el9_6 | 14.03.2025 |
SB2025031426 SB2025031429 SB2025031430 and 105 more |
||
| #VU99614 - Improper input validation CVE-2024-50602 |
CWE-20 | Medium | 2.2.5-16.el8_10, 2.5.0-1.el9_2.2, 2.5.0-2.el9_4.2, 2.5.0-3.el9_5.1 | 01.11.2024 |
SB2024110155 SB2024110182 SB2024110534 and 98 more |
||
| #VU96898 - Integer overflow CVE-2024-45491 |
CWE-190 | High | 2.2.5-15.el8_10, 2.5.0-2.el9_4.1 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 106 more |
||
| #VU96897 - Buffer Underwrite ('Buffer Underflow') CVE-2024-45490 |
CWE-124 | High | 2.2.5-15.el8_10, 2.5.0-2.el9_4.1 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 113 more |
||
| #VU86230 - Resource exhaustion CVE-2023-52425 |
CWE-400 | Medium | 2.2.5-8.el8_6.5, 2.2.5-11.el8_8.2, 2.2.5-11.el8_9.1, 2.2.10-1.el8_4, 2.2.10-12.el9_0.4, 2.5.0-1.el9_2.1, 2.5.0-1.el9_3.1 | 07.02.2024 |
SB2024020750 SB2024020754 SB2024020765 and 120 more |
||
| #VU68718 - Use After Free CVE-2022-43680 |
CWE-416 | Medium | 2.2.5-8.el8_6.4, 2.2.5-10.el8_7.1, 2.2.10-1.el8_4, 2.4.9-1.el9_1.1 | 25.10.2022 |
SB2022102560 SB2022102566 SB2022103010 and 99 more |
||
| #VU60738 - Integer overflow CVE-2022-25314 |
CWE-190 | Medium | 2.2.5-8.el8_6.2, 2.2.10-1.el8_4, 2.2.10-12.el9_0.2 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 68 more |
||
| #VU60737 - Stack-based buffer overflow CVE-2022-25313 |
CWE-121 | High | 2.2.5-8.el8_6.2, 2.2.10-1.el8_4, 2.2.10-12.el9_0.2 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 64 more |
||
| #VU60114 - Integer overflow CVE-2022-23990 |
CWE-190 | High | 2.2.10-1.el8_4, 2.2.10-1.el8_6, 2.2.10-1.el8_8 | 28.01.2022 |
SB2022012504 SB2022012804 SB2022020902 and 47 more |
||
| #VU59650 - Integer overflow CVE-2022-22827 |
CWE-190 | High | 2.1.0-14.el7_9, 2.2.5-4.el8_5.3, 2.2.10-1.el8_4 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 54 more |
||
| #VU59649 - Integer overflow CVE-2022-22826 |
CWE-190 | High | 2.1.0-14.el7_9, 2.2.5-4.el8_5.3, 2.2.10-1.el8_4 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 54 more |
||
| #VU59648 - Integer overflow CVE-2022-22825 |
CWE-190 | High | 2.1.0-14.el7_9, 2.2.5-4.el8_5.3, 2.2.10-1.el8_4 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 56 more |
||
| #VU59647 - Integer overflow CVE-2022-22824 |
CWE-190 | High | 2.1.0-14.el7_9, 2.2.5-4.el8_5.3, 2.2.10-1.el8_4 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 57 more |
||
| #VU59646 - Integer overflow CVE-2022-22823 |
CWE-190 | High | 2.1.0-14.el7_9, 2.2.5-4.el8_5.3, 2.2.10-1.el8_4 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 57 more |
||
| #VU59645 - Integer overflow CVE-2022-22822 |
CWE-190 | High | 2.1.0-14.el7_9, 2.2.5-4.el8_5.3, 2.2.10-1.el8_4 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 59 more |
||
| #VU59643 - Integer overflow CVE-2021-46143 |
CWE-190 | High | 2.1.0-14.el7_9, 2.2.5-4.el8_5.3, 2.2.10-1.el8_4 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 58 more |
||
| #VU59642 - Resource exhaustion CVE-2021-45960 |
CWE-400 | Medium | 2.1.0-14.el7_9, 2.2.5-4.el8_5.3, 2.2.10-1.el8_4 | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 56 more |
||
| #VU42119 - Resource exhaustion CVE-2013-0340 |
CWE-400 | Medium | 2.2.10-1.el8_4, 2.2.10-1.el8_6, 2.2.10-1.el8_8, 2.2.10-12.el9_0.4 | 21.01.2014 |
SB2014012103 SB2017011129 SB2021052301 and 16 more |
Showing elements 1 - 20 out of 29