kritik
CVE-2022-25236
expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Julia9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Amazon, CBL-Mariner, Julia, Photon OS. Daha düşük diyenler: Red Hat (yüksek), AlmaLinux (yüksek), Bottlerocket (yüksek), Oracle (yüksek), Rocky Linux (yüksek), Ubuntu (yüksek).
Açıklama
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| amazon linux 1 | expat, expat-debuginfo, expat-devel | 2.1.0-12.27.amzn1 |
| amazon linux 2 | expat, expat-debuginfo, expat-devel ve 3 tane daha | 2.1.0-12.amzn2.0.3 ve 1 tane daha |
| amazon linux 2022 | expat, expat-debuginfo, expat-debugsource ve 2 tane daha | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2023 | expat, expat-debuginfo, expat-debugsource ve 2 tane daha | 2.5.0-1.amzn2023.0.2 |
| CBL-Mariner 1.0 | expat | 0:2.4.6-1.cm1 |
| CBL-Mariner 2.0 | expat | 0:2.4.8-1.cm2 |
| julia::Julia Ecosystem Security Advisories | Expat_jll | 2.4.8+0 |
| Photon OS 1.0 | expat | 2.2.9-6.ph1 |
| Photon OS 2.0 | expat | 2.2.9-6.ph2 |
| Photon OS 3.0 | expat | 2.2.9-7.ph3 |
| Photon OS 4.0 | expat, expat-devel, expat-docs ve 1 tane daha | 2.2.9-7.ph4 |
| alma 8 | expat, expat-devel, firefox ve 3 tane daha | 2.2.5-8.el8_6.2 ve 3 tane daha |
67 kaynaktaki 144 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| amazon linux 1 | expat | 2.1.0-12.27.amzn1 |
| amazon linux 1 | expat-debuginfo | 2.1.0-12.27.amzn1 |
| amazon linux 1 | expat-devel | 2.1.0-12.27.amzn1 |
| amazon linux 2 | expat | 2.1.0-12.amzn2.0.3 |
| amazon linux 2 | expat-debuginfo | 2.1.0-12.amzn2.0.3 |
| amazon linux 2 | expat-devel | 2.1.0-12.amzn2.0.3 |
| amazon linux 2 | expat-static | 2.1.0-12.amzn2.0.3 |
| amazon linux 2 | thunderbird | 91.7.0-2.amzn2.0.1 |
| amazon linux 2 | thunderbird-debuginfo | 91.7.0-2.amzn2.0.1 |
| amazon linux 2022 | expat | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2022 | expat-debuginfo | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2022 | expat-debugsource | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2022 | expat-devel | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2022 | expat-static | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2023 | expat | 2.5.0-1.amzn2023.0.2 |
| amazon linux 2023 | expat-debuginfo | 2.5.0-1.amzn2023.0.2 |
| amazon linux 2023 | expat-debugsource | 2.5.0-1.amzn2023.0.2 |
| amazon linux 2023 | expat-devel | 2.5.0-1.amzn2023.0.2 |
| amazon linux 2023 | expat-static | 2.5.0-1.amzn2023.0.2 |
| CBL-Mariner 1.0 | expat | 0:2.4.6-1.cm1 |
| CBL-Mariner 2.0 | expat | 0:2.4.8-1.cm2 |
| julia::Julia Ecosystem Security Advisories | Expat_jll | 2.4.8+0 |
| Photon OS 1.0 | expat | 2.2.9-6.ph1 |
| Photon OS 2.0 | expat | 2.2.9-6.ph2 |
| Photon OS 3.0 | expat | 2.2.9-7.ph3 |
| Photon OS 4.0 | expat | 2.2.9-7.ph4 |
| Photon OS 4.0 | expat-devel | 2.2.9-7.ph4 |
| Photon OS 4.0 | expat-docs | 2.2.9-7.ph4 |
| Photon OS 4.0 | expat-libs | 2.2.9-7.ph4 |
| alma 8 | expat | 2.2.5-8.el8_6.2 |
| alma 8 | expat-devel | 2.2.5-8.el8_6.2 |
| alma 8 | firefox | 91.7.0-3.el8_5.alma |
| alma 8 | mingw32-expat | 2.4.8-1.el8 |
| alma 8 | mingw64-expat | 2.4.8-1.el8 |
| alma 8 | thunderbird | 91.7.0-2.el8_5.alma |
| alpine 3.12 | expat | 2.2.10-r2 |
| alpine 3.13 | expat | 2.2.10-r4 |
| alpine 3.14 | expat | 2.4.5-r0 |
| alpine 3.15 | expat | 2.4.5-r0 |
| alpine 3.16 | expat | 2.4.5-r0 |
| alpine 3.17 | expat | 2.4.5-r0 |
| alpine 3.18 | expat | 2.4.5-r0 |
| alpine 3.19 | expat | 2.4.5-r0 |
| alpine 3.20 | expat | 2.4.5-r0 |
| alpine 3.21 | expat | 2.4.5-r0 |
| alpine 3.22 | expat | 2.4.5-r0 |
| alpine 3.23 | expat | 2.4.5-r0 |
| alpine 3.24 | expat | 2.4.5-r0 |
| alpine edge | expat | 2.4.5-r0 |
| bottlerocket | libexpat | 1.7.0-bf3ca665 |
| debian 10 | expat | 2.2.6-2+deb10u3 |
| debian 11 | expat | 2.2.10-2+deb11u2 |
| debian 11 | libxmltok | düzeltme belirtilmemiş |
| debian 12 | expat | 2.4.5-1 |
| debian 12 | libxmltok | düzeltme belirtilmemiş |
| debian 13 | expat | 2.4.5-1 |
| debian 14 | expat | 2.4.5-1 |
| debian 9 | expat | 2.2.0-2+deb9u5 |
| echo | expat | 2.4.5-1 |
| echo | libxmltok | düzeltme belirtilmemiş |
| Oracle Linux 6 | expat | 2.0.1-13.0.1.el6_8 |
| Oracle Linux 6 | expat-devel | 2.0.1-13.0.1.el6_8 |
| Oracle Linux 7 | expat | 2.1.0-14.0.1.el7_9 |
| Oracle Linux 7 | expat-devel | 2.1.0-14.0.1.el7_9 |
| Oracle Linux 7 | expat-static | 2.1.0-14.0.1.el7_9 |
| Oracle Linux 7 | firefox | 91.7.0-3.0.1.el7_9 |
| Oracle Linux 7 | thunderbird | 91.7.0-2.0.1.el7_9 |
| Oracle Linux 8 | expat | 2.2.5-4.el8_5.3 |
| Oracle Linux 8 | expat-devel | 2.2.5-4.el8_5.3 |
| Oracle Linux 8 | firefox | 91.7.0-3.0.1.el8_5 |
| Oracle Linux 8 | thunderbird | 91.7.0-2.0.1.el8_5 |
| rapidfort debian 12 | libxmltok | 0:1.2-4.1 |
| rapidfort debian 13 | libxmltok | 0:1.2-4.1 |
| rapidfort ubuntu 20.04 | matanza | düzeltme belirtilmemiş |
| rapidfort ubuntu 20.04 | swish-e | düzeltme belirtilmemiş |
| rapidfort ubuntu 20.04 | thunderbird | düzeltme belirtilmemiş |
| rapidfort ubuntu 22.04 | matanza | düzeltme belirtilmemiş |
| rapidfort ubuntu 22.04 | swish-e | düzeltme belirtilmemiş |
| rapidfort ubuntu 22.04 | thunderbird | düzeltme belirtilmemiş |
| rapidfort ubuntu 24.04 | matanza | düzeltme belirtilmemiş |
| rapidfort ubuntu 24.04 | swish-e | düzeltme belirtilmemiş |
| rapidfort ubuntu 24.04 | thunderbird | düzeltme belirtilmemiş |
| Red Hat | firefox:flatpak::firefox | düzeltme belirtilmemiş |
| Red Hat | thunderbird:flatpak::thunderbird | düzeltme belirtilmemiş |
| rocky 8 | expat | 2.2.5-4.el8_5.3 |
| rocky 8 | expat-devel | 2.2.5-4.el8_5.3 |
| rocky 8 | firefox | 91.7.0-3.el8_5 |
| rocky 8 | thunderbird | 91.7.0-2.el8_5 |
| root.io debian 11 | rootio-expat | 2.2.10-2+deb11u2 |
| root.io debian 12 | rootio-expat | 2.4.5-1 |
| root.io debian 13 | rootio-expat | 2.4.5-1 |
| seal debian | expat | 2.2.10-2+deb11u5+sp999 |
| seal debian | seal-expat | 2.2.10-2+deb11u5+sp999 |
| seal Red Hat 6 | expat | 2.0.1-15.el6_10+sp999 |
| seal Red Hat 6 | seal-expat | 2.0.1-15.el6_10+sp999 |
| seal Red Hat 7 | expat | 2.1.0-15.el7_9+sp999 |
| seal Red Hat 7 | seal-expat | 2.1.0-15.el7_9+sp999 |
| ubuntu 14.04-ESM | expat | 2.1.0-4ubuntu1.4+esm4 |
| ubuntu 16.04-ESM | coin3 | 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2 |
| ubuntu 16.04-ESM | expat | 2.1.0-7ubuntu0.16.04.5+esm2 |
| ubuntu 16.04-ESM | insighttoolkit | 3.20.1+git20120521-6ubuntu0.1~esm1 |
| ubuntu 16.04-ESM | libxmltok | 1.2-3ubuntu0.16.04.1~esm2 |
| ubuntu 16.04-ESM | swish-e | 2.4.7-4ubuntu0.1~esm1 |
| ubuntu 18.04 | expat | 2.2.5-3ubuntu0.4 |
| ubuntu 18.04-ESM | coin3 | 3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1 |
| ubuntu 18.04-ESM | expat | 2.2.5-3ubuntu0.4 |
| ubuntu 18.04-ESM | libxmltok | 1.2-4ubuntu0.18.04.1~esm1 |
| ubuntu 18.04-ESM | swish-e | 2.4.7-5ubuntu1+esm1 |
| ubuntu 18.04-ESM | xmlrpc-c | 1.33.14-8ubuntu0.18.04.1~esm1 |
| ubuntu 20.04 | expat | 2.2.9-1ubuntu0.2 |
| ubuntu 20.04-ESM | expat | 2.2.9-1ubuntu0.2 |
| ubuntu 20.04-ESM | libxmltok | 1.2-4ubuntu0.20.04.1~esm1 |
| ubuntu 20.04-ESM | swish-e | 2.4.7-6ubuntu0.1~esm1 |
| ubuntu 20.04-ESM | xmlrpc-c | 1.33.14-8ubuntu0.20.04.1~esm1 |
| ubuntu 21.10 | expat | 2.4.1-2ubuntu0.1 |
| ubuntu 22.04 | expat | 2.4.5-2 |
| ubuntu 22.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 22.04 | libxmltok | düzeltme belirtilmemiş |
| ubuntu 22.04 | swish-e | düzeltme belirtilmemiş |
| ubuntu 22.04 | xmlrpc-c | düzeltme belirtilmemiş |
| ubuntu 22.10 | expat | 2.4.5-2 |
| ubuntu 22.10 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 23.04 | expat | 2.4.5-2 |
| ubuntu 23.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 23.10 | expat | 2.4.5-2 |
| ubuntu 23.10 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 24.04 | expat | 2.4.5-2 |
| ubuntu 24.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 24.04 | libxmltok | 1.2-4.1ubuntu1 |
| ubuntu 24.04 | swish-e | düzeltme belirtilmemiş |
| ubuntu 24.04 | xmlrpc-c | düzeltme belirtilmemiş |
| ubuntu 24.10 | expat | 2.4.5-2 |
| ubuntu 24.10 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 24.10 | libxmltok | 1.2-4.1ubuntu1 |
| ubuntu 25.04 | expat | 2.4.5-2 |
| ubuntu 25.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 25.04 | libxmltok | 1.2-4.1ubuntu1 |
| ubuntu 25.10 | expat | 2.4.5-2 |
| ubuntu 25.10 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 26.04 | expat | 2.4.5-2 |
| ubuntu 26.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 26.04 | swish-e | düzeltme belirtilmemiş |
| ubuntu 26.10 | expat | 2.4.5-2 |
| ubuntu 26.10 | firefox | 1:1snap1-0ubuntu1 |
Referanslar
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25236
- http://packetstormsecurity.com/files/167238/Zoom-XMPP-Stanza-Smuggling-Remote-Code-Execution.html
- http://www.openwall.com/lists/oss-security/2022/02/19/1
- https://access.redhat.com/errata/RHSA-2022:0951
- https://access.redhat.com/errata/RHSA-2022:7811
- https://access.redhat.com/security/cve/CVE-2022-25236
- https://blog.hartwork.org/posts/expat-2-4-5-released/
- https://bugzilla.redhat.com/2048356
67 referansın hepsi
- https://bugzilla.redhat.com/2056350
- https://bugzilla.redhat.com/2056354
- https://bugzilla.redhat.com/2056363
- https://bugzilla.redhat.com/2056366
- https://bugzilla.redhat.com/2056370
- https://bugzilla.redhat.com/show_bug.cgi?id=2044451
- https://bugzilla.redhat.com/show_bug.cgi?id=2044455
- https://bugzilla.redhat.com/show_bug.cgi?id=2044457
- https://bugzilla.redhat.com/show_bug.cgi?id=2044464
- https://bugzilla.redhat.com/show_bug.cgi?id=2044467
- https://bugzilla.redhat.com/show_bug.cgi?id=2044479
- https://bugzilla.redhat.com/show_bug.cgi?id=2044484
- https://bugzilla.redhat.com/show_bug.cgi?id=2044488
- https://bugzilla.redhat.com/show_bug.cgi?id=2044613
- https://bugzilla.redhat.com/show_bug.cgi?id=2056363
- https://bugzilla.redhat.com/show_bug.cgi?id=2056366
- https://bugzilla.redhat.com/show_bug.cgi?id=2056370
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-484086.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45960
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46143
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22822
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22823
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22824
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22825
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22826
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22827
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23852
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25235
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25236
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25315
- https://errata.almalinux.org/8/ALSA-2022-7811.html
- https://errata.rockylinux.org/RLSA-2022:0951
- https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-v95x-cqc2-wxq4
- https://github.com/libexpat/libexpat/pull/561
- https://github.com/libexpat/libexpat/pull/561/commits/2de077423fb22750ebea599677d523b53cb93b1d%20%28test%29
- https://github.com/libexpat/libexpat/pull/561/commits/a2fe525e660badd64b6c557c2b1ec26ddc07f6e4%20%28fix%29
- https://github.com/libexpat/libexpat/pull/577
- https://linux.oracle.com/cve/CVE-2022-25236.html
- https://linux.oracle.com/errata/ELSA-2022-9359.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
- https://nvd.nist.gov/vuln/detail/CVE-2022-25236
- https://security.gentoo.org/glsa/202209-24
- https://security.netapp.com/advisory/ntap-20220303-0008/
- https://ubuntu.com/security/notices/USN-5288-1
- https://ubuntu.com/security/notices/USN-5455-1
- https://ubuntu.com/security/notices/USN-8235-1
- https://ubuntu.com/security/notices/USN-8240-1
- https://ubuntu.com/security/notices/USN-8241-1
- https://ubuntu.com/security/notices/USN-8313-1
- https://ubuntu.com/security/notices/USN-8314-1
- https://ubuntu.com/security/notices/USN-8316-1
- https://www.cve.org/CVERecord?id=CVE-2022-25236
- https://www.debian.org/security/2022/dsa-5085
- https://www.oracle.com/security-alerts/cpuapr2022.html