Use-after-free in expat - CVE-2022-43680

Vulnerability identifier: #VU68718

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-43680

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate. A remote attacker can trigger a use-after-free error and perform a denial of service (DoS) attack.

expat
Debian Linux
Gentoo Linux
Amazon Linux AMI
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
Oracle Linux
IBM AIX
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Oracle Solaris
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
Slackware Linux
Ubuntu
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
openEuler
Fedora
Google Android
IBM Tivoli Monitoring
Submariner
Data Lakehouse
Migration Toolkit for Runtimes
Service Telemetry Framework
Migration Toolkit for Virtualization
Red Hat Advanced Cluster Management for Kubernetes
IBM Watson Assistant for IBM Cloud Pak for Data
OpenShift Logging
Red Hat Migration Toolkit for Applications
Tenable Nessus
IBM Rational ClearCase
Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
Oracle Financial Services Behavior Detection Platform
Oracle Middleware Common Libraries and Tools
Oracle HTTP Server
Middleware Common Libraries and Tools
Enterprise Manager Base Platform
IBM MQ Operator
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Power Hardware Management Console (HMC)
IBM Cloud Pak for Watson AIOps
Telemetry Dashboard
Storage Defender – Data Protect
Liquidware
IBM MQ Appliance
Citrix Workspace App
Webex App VDI
cflinuxfs3
ObjectScale
PowerStore T
IBM supplied MQ Advanced container images
Db2 Net Search Extender
EMC Cloud Tiering Appliance
Robotic Process Automation for Cloud Pak
Integrated System for Microsoft Azure Stack Hub
Self Node Remediation Operator
OpenShift Service Mesh
Red Hat OpenShift Serverless
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift API for Data Protection (OADP)
Migration Toolkit for Containers
VMware Horizon Client
Dell EMC Container Storage Modules
HPE Moonshot 1500 Chassis Manager
IBM Tivoli Network Manager (ITNM)
Red Hat OpenShift GitOps
Oracle Financial Services Currency Transaction Reporting
OpenOffice
iDRAC9
RSA Authentication Manager
LANTIME Operating System Firmware (LTOS)
PowerScale OneFS
Oracle Outside In Technology
Cloud Pak for Security (CP4S)
NetWorker Management Console
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
expat (Ubuntu package)
libexpat1 (Ubuntu package)
lib64expat1 (Ubuntu package)
mingw-pixman
expat
libexpat-devel
expat-debuginfo
expat-debuginfo-32bit
expat-debugsource
libexpat1
libexpat1-debuginfo
libexpat1-debuginfo-32bit
libexpat1-32bit
expat (Red Hat package)
expat-devel
expat-32bit-debuginfo
libexpat1-32bit-debuginfo
libexpat-devel-32bit
expat-help
expat (Debian package)
dev-libs/expat
mingw-expat
python3
Cisco Jabber
Oracle Database Server
Cisco Webex Meetings
HPE NonStop Virtual Tape Repository (VTR)
SINEC NMS
IBM Security Verify Access
IBM DS8000 Hardware Management Console
IBM Cloud Pak System
IBM Security SiteProtector System
Dell EMC NetWorker vProxy
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
IBM FileNet Content Manager
IBM HTTP Server
Dell EMC VxRail Appliance

Install updates from vendor's website.

expat - update to 2.5.0
Submariner - update to 0.14.0
Self Node Remediation Operator - update to 0.5.1
Data Lakehouse - update to 1.1.0.0
Migration Toolkit for Runtimes - update to 1.0.2
Telemetry Dashboard - update to 1.1.0.6 on Thin OS 2405
OpenShift API for Data Protection (OADP) - update to 1.1.2
Migration Toolkit for Containers - update to 1.7.7
Red Hat OpenShift GitOps - addressed in versions 1.5.9, 1.6.4, 1.7, 1.10.0, 1.11
Service Telemetry Framework - update to 1.5.4
Storage Defender – Data Protect - update to 2.1.4
OpenShift Service Mesh - addressed in versions 2.3.1, 2.3.2
Migration Toolkit for Virtualization - update to 2.4.3
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.6.4, 2.7.0
OpenOffice - update to 4.1.15
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.0
OpenShift Logging - update to 5.6.1
Red Hat Migration Toolkit for Applications - update to 6.0.1
Liquidware - update to 6.7.0.2.2 on Thin OS 2405
iDRAC9 - addressed in versions 7.00.00.184, 7.30.30.51
LANTIME Operating System Firmware (LTOS) - update to 7.06.012
Tenable Nessus - addressed in versions 8.15.7, 10.3.2, 10.4.1
IBM MQ Appliance - addressed in versions 9.3.0.5, 9.3.2.1
Cisco Jabber - update to 14.3.0.308378.11 on Thin OS 2405
Citrix Workspace App - update to 24.2.0.65.17 on Thin OS 2405
Webex App VDI - update to 44.2.0.28744.1 on Thin OS 2405
Cisco Webex Meetings - update to 44.2.0.76.2 on Thin OS 2405
VMware Horizon Client - update to 2312.1.8.12.1.5 on Thin OS 2405
expat (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.2.5-3ubuntu0.8, 2.2.5-3ubuntu0.9, 2.2.9-1ubuntu0.5, 2.2.9-1ubuntu0.6, 2.4.7-1ubuntu0.1, 2.4.7-1ubuntu0.2, 2.4.8-2ubuntu0.22.10.1
libexpat1 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.2.5-3ubuntu0.8, 2.2.5-3ubuntu0.9, 2.2.9-1ubuntu0.5, 2.2.9-1ubuntu0.6, 2.4.7-1ubuntu0.1, 2.4.7-1ubuntu0.2, 2.4.8-2ubuntu0.22.10.1
lib64expat1 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
HPE NonStop Virtual Tape Repository (VTR) - update to T09644V01^AAK
mingw-pixman - addressed in versions 0.42.2-1.fc35, 0.42.2-1.fc36, 0.42.2-1.fc37
cflinuxfs3 - addressed in versions 0.335.0, 0.338.0
SINEC NMS - update to 1.0.3.1
ObjectScale - update to 1.4.0
Dell EMC Container Storage Modules - update to 1.6.0
Cloud Pak for Security (CP4S) - update to 1.10.12.0
Red Hat OpenShift Serverless - update to 1.27.0
IBM MQ Operator - addressed in versions 2.0.7, 2.2.2
expat - addressed in versions 2.1.0-15.33, 2.5.0-1
libexpat-devel - addressed in versions 2.1.0-21.28.1, 2.2.5-150000.3.25.1, 2.4.4-150400.3.12.1
expat - addressed in versions 2.1.0-21.28.1, 2.2.5-150000.3.25.1, 2.4.4-150400.3.12.1
expat-debuginfo - addressed in versions 2.1.0-21.28.1, 2.2.5-150000.3.25.1, 2.4.4-150400.3.12.1
expat-debuginfo-32bit - update to 2.1.0-21.28.1
expat-debugsource - addressed in versions 2.1.0-21.28.1, 2.2.5-150000.3.25.1, 2.4.4-150400.3.12.1
libexpat1 - addressed in versions 2.1.0-21.28.1, 2.2.5-150000.3.25.1, 2.4.4-150400.3.12.1
libexpat1-debuginfo - addressed in versions 2.1.0-21.28.1, 2.2.5-150000.3.25.1, 2.4.4-150400.3.12.1
libexpat1-debuginfo-32bit - update to 2.1.0-21.28.1
libexpat1-32bit - addressed in versions 2.1.0-21.28.1, 2.2.5-150000.3.25.1, 2.4.4-150400.3.12.1
expat (Red Hat package) - addressed in versions 2.2.5-8.el8_6.4, 2.2.5-10.el8_7.1, 2.2.10-1.el8_4, 2.4.9-1.el9_1.1
expat - update to 2.2.5-11
expat-devel - update to 2.2.5-11
expat-32bit-debuginfo - addressed in versions 2.2.5-150000.3.25.1, 2.4.4-150400.3.12.1
libexpat1-32bit-debuginfo - addressed in versions 2.2.5-150000.3.25.1, 2.4.4-150400.3.12.1
libexpat-devel-32bit - addressed in versions 2.2.5-150000.3.25.1, 2.4.4-150400.3.12.1
expat-debugsource - update to 2.2.9-9
expat-devel - update to 2.2.9-9
expat-debuginfo - update to 2.2.9-9
expat-help - update to 2.2.9-9
expat - update to 2.2.9-9
expat (Debian package) - update to 2.2.10-2+deb11u5
IBM Cloud Pak System - update to 2.3.4.0
expat - addressed in versions 2.4.3, 2.5.0
dev-libs/expat - update to 2.5.0
mingw-expat - addressed in versions 2.5.0-1.fc35, 2.5.0-1.fc36, 2.5.0-1.fc37
IBM Security SiteProtector System - update to 3.1.1.20
PowerStore T - update to 3.5.0.1-2083289
python3 - update to 3.9.16
HPE Moonshot 1500 Chassis Manager - update to 4.0-b43
IBM Tivoli Network Manager (ITNM) - update to 4.2.0.17
Dell EMC NetWorker vProxy - update to 4.3.0-40
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.6.4
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.8.0.1
EMC ViPR SRM - update to 4.8.0.1
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.13.0
IBM FileNet Content Manager - addressed in versions 5.5.4.0 IF0010, 5.5.8.0 IF004, 5.5.9.0 IF002, 5.5.10.0 IF001
IBM HTTP Server - addressed in versions 7.0.0.45 Interim Fix PH50316, 8.0.0.15 Interim Fix PH50316, 8.5.5.23, 9.0.5.15
Dell EMC VxRail Appliance - update to 7.0.411
RSA Authentication Manager - update to 8.7 Patch 3
IBM Power Hardware Management Console (HMC) - addressed in versions 9.2.950.0 SP3, 10.1.1020.0 SP1, 10.2.1030.0, 10.2.1030.0 SP1
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.3-r1, 9.3.1.1-r1
PowerScale OneFS - addressed in versions 9.4.0.14, 9.5.0.6
Db2 Net Search Extender - addressed in versions 9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7
IBM Security Verify Access - update to 10.0.6.0
Google Android - addressed in versions 10 2023-02-01, 11 2023-02-01, 12L 2023-02-01, 12 2023-02-01, 13 2023-02-01
EMC Cloud Tiering Appliance - update to 13.1.0.2.29
NetWorker Management Console - update to 19.12.0.1
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.3, 23.0.3
IBM DS8000 Hardware Management Console - update to 89.33.34.0
Integrated System for Microsoft Azure Stack Hub - update to 2606

• https://github.com/libexpat/libexpat/pull/650
• https://github.com/libexpat/libexpat/pull/616
• https://github.com/libexpat/libexpat/issues/649

• Denial of service in expat library
• Slackware Linux update for expat
• Debian update for expat
• Gentoo update for Expat
• Multiple vulnerabilities in Tenable Nessus
• SUSE update for expat
• SUSE update for expat
• SUSE update for expat
• Multiple vulnerabilities in Tenable Nessus
• Multiple vulnerabilities in IBM HTTP Server
• Ubuntu update for expat
• Cloud Foundry Foundation cflinuxfs3 update for libexpat
• Ubuntu update for expat
• Cloud Foundry Foundation cflinuxfs3 update for libexpat
• Slackware Linux update for python3
• Amazon Linux AMI update for expat
• Multiple vulnerabilities in IBM Security SiteProtector System
• Multiple vulnerabilities in IBM Db2 Net Search Extender
• Multiple vulnerabilities in IBM Tivoli Monitoring
• IBM AIX update for Python
• Multiple vulnerabilities in Dell SRM and Dell Storage Monitoring and Reporting
• Multiple vulnerabilities in IBM Rational ClearCase
• Red Hat Enterprise Linux 8 update for expat
• Multiple vulnerabilities in Oracle Solaris
• Multiple vulnerabilities in Oracle Outside In Technology
• Multiple vulnerabilities in Middleware Common Libraries and Tools
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 9 update for expat
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.5
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.7
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.6
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.3
• Multiple vulnerabilities in Google Android
• Multiple vulnerabilities in Submariner
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in OpenShift Serverless
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.6
• Red Hat Advanced Cluster Management for Kubernetes 2.6 update for Submariner
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Ubuntu update for expat
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.1
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in Migration Toolkit for Runtimes
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.3
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Use-after-free in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Use-after-free in Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
• Use-after-free in Oracle Financial Services Currency Transaction Reporting
• Multiple vulnerabilities in Oracle Financial Services Behavior Detection Platform
• Use-after-free in IBM Power Hardware Management Console (HMC)
• Multiple vulnerabilities in IBM MQ Appliance
• Multiple vulnerabilities in Siemens SINEC NMS
• Use-after-free in IBM Tivoli Network Manager (ITNM)
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• Multiple vulnerabilities in IBM FileNet Content Manager
• Use-after-free in IBM Watson Assistant for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Security Verify Access Appliance
• Multiple vulnerabilities in IBM DS8000 Hardware Management Console (HMC)
• Multiple vulnerabilities in Oracle Database Server
• Multiple vulnerabilities in Oracle HTTP Server
• Multiple vulnerabilities in Dell EMC PowerScale OneFS
• Multiple vulnerabilities in Dell NetWorker vProxy
• Multiple vulnerabilities in Dell Container Storage Modules
• Multiple vulnerabilities in Dell PowerStore Family
• Multiple vulnerabilities in Enterprise Manager Base Platform
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.5
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in Dell PowerScale OneFS
• Multiple vulnerabilities in Apache OpenOffice
• Red Hat Enterprise Linux 8.6 Extended Update Support update for expat
• openEuler update for expat
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in Dell ThinOS
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Amazon Linux AMI update for expat
• Multiple vulnerabilities in Dell ObjectScale
• Multiple vulnerabilities in IBM Cloud Pak System
• Multiple vulnerabilities in HPE Moonshot 1500 Chassis Manager
• Multiple vulnerabilities in HPE NonStop Vrtual Tape Repository (VTR)
• Fedora 35 update for mingw-pixman
• Fedora 36 update for mingw-pixman
• Fedora 37 update for mingw-pixman
• Fedora 37 update for mingw-expat
• Fedora 35 update for mingw-expat
• Fedora 36 update for mingw-expat
• Anolis OS update for expat
• RSA Authentication Manager update for third-party components
• Multiple vulnerabilities in Meinberg LANTIME firmware
• Dell NetWorker Management Console update for third-party components
• Red Hat Enterprise Linux 8 update for expat
• Multiple vulnerabilities in Oracle Middleware Common Libraries and Tools
• Multiple vulnerabilities in IBM Storage Defender - Data Protect
• Multiple vulnerabilities in Dell iDRAC9
• Multiple vulnerabilities in Dell Integrated System for Microsoft Azure Stack Hub 14G and 16G