Known vulnerabilities in expat (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
expat (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:expat_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
29
Public exploits:
2
Known exploited (KEV):
0
Breakdown by Severity Chart
2.5.0-6.el9_8.5
2.5.0-4.el8_10
2.5.0-6.el9_8.3
2.5.0-6.el9_8.1
2.5.0-2.el8_10
2.5.0-6.el9
2.2.10-1.el8_6
2.2.10-1.el8_4
2.2.10-1.el8_8
2.5.0-5.el9_7.1
2.2.10-12.el9_0.4
2.5.0-1.el9_2.3
2.5.0-1.el8_10
2.5.0-5.el9_6.1
2.7.1-1.el10_1.3
2.7.1-1.el10_0.3
2.5.0-5.el9_6
2.5.0-3.el9_5.3
2.5.0-1.el9_2.2
2.5.0-2.el9_4.2
2.5.0-3.el9_5.1
2.2.5-16.el8_10
2.2.5-15.el8_10
2.5.0-2.el9_4.1
1.95.7-4.el4_8.2
1.95.8-8.3.el5_4.2
2.5.0-1.el9_2.1
2.2.5-8.el8_6.5
2.2.5-11.el8_8.2
2.2.5-11.el8_9.1
2.5.0-1.el9_3.1
2.2.5-8.el8_6.4
2.4.9-1.el9_1.1
2.2.5-10.el8_7.1
2.0.1-15.el6_10
2.2.5-8.el8_6.3
2.2.10-12.el9_0.3
2.1.0-15.el7_9
2.2.5-3.el8_2.3
2.2.5-4.el8_4.4
2.2.5-3.el8_1.2
2.2.10-12.el9_0.2
2.2.5-8.el8_6.2
2.2.5-4.el8_4.3
2.0.1-14.el6_10
2.2.5-3.el8_1.1
2.2.5-3.el8_2.2
2.1.0-14.el7_9
2.2.5-4.el8_4.2
2.2.5-4.el8_5.3
2.2.5-4.el8
2.1.0-12.el7
2.1.0-11.el7_7
2.1.0-11.el7
1.95.8-11.el5_8
2.1.0-10.el7_3
2.0.1-13.el6_8
2.0.1-11.el6_2
Vulnerabilities (29)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU96899 - Integer overflow CVE-2024-45492 |
CWE-190 | High | 2.2.5-15.el8_10, 2.5.0-2.el9_4.1 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 108 more |
||
| #VU87337 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-28757 |
CWE-611 | Medium | 2.5.0-1.el9_2.1, 2.5.0-1.el9_3.1 | 11.03.2024 |
SB2024031135 SB2024031143 SB2024031144 and 75 more |
||
| #VU67532 - Use After Free CVE-2022-40674 |
CWE-416 | High | 2.0.1-15.el6_10, 2.1.0-15.el7_9, 2.2.5-3.el8_1.2, 2.2.5-3.el8_2.3, 2.2.5-4.el8_4.4, 2.2.5-8.el8_6.3, 2.2.10-12.el9_0.3 | 21.09.2022 |
SB2022092118 SB2022092119 SB2022092317 and 111 more |
||
| #VU60739 - Integer overflow CVE-2022-25315 |
CWE-190 | High | 2.0.1-14.el6_10, 2.1.0-14.el7_9, 2.2.5-3.el8_1.1, 2.2.5-3.el8_2.2, 2.2.5-4.el8_4.2, 2.2.5-4.el8_5.3 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 99 more |
||
| #VU60736 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25235 |
CWE-94 | High | 2.0.1-14.el6_10, 2.1.0-14.el7_9, 2.2.5-3.el8_1.1, 2.2.5-3.el8_2.2, 2.2.5-4.el8_4.2, 2.2.5-4.el8_5.3 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 106 more |
||
| #VU60733 - Improper input validation CVE-2022-25236 |
CWE-20 | Medium | 2.0.1-14.el6_10, 2.1.0-14.el7_9, 2.2.5-3.el8_1.1, 2.2.5-3.el8_2.2, 2.2.5-4.el8_4.2, 2.2.5-4.el8_5.3 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 109 more |
||
| #VU59966 - Integer overflow CVE-2022-23852 |
CWE-190 | High | 2.1.0-14.el7_9, 2.2.5-4.el8_4.3, 2.2.5-4.el8_5.3 | 25.01.2022 |
SB2022012504 SB2022012622 SB2022020902 and 58 more |
||
| #VU21091 - Out-of-bounds read CVE-2019-15903 |
CWE-125 | Medium | 2.1.0-12.el7, 2.2.5-4.el8 | 12.09.2019 |
SB2019091209 SB2019091210 SB2019091701 and 61 more |
||
| #VU18923 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2018-20843 |
CWE-611 | Medium | 2.1.0-12.el7, 2.2.5-4.el8 | 27.06.2019 |
SB2019062808 SB2019070104 SB2019072102 and 30 more |
Showing elements 21 - 40 out of 29