critical
CVE-2022-22823
expat: Expat: Denial of Service vulnerability in XML parsing
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Julia9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Amazon, CBL-Mariner, Julia, Photon OS. Rated lower by Red Hat (high), AlmaLinux (medium), Bottlerocket (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).
Description
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | expat, expat-debuginfo, expat-devel | 2.1.0-14.31.amzn1 |
| amazon linux 2 | expat, expat-debuginfo, expat-devel and 1 more | 2.1.0-14.amzn2.0.1 |
| amazon linux 2022 | expat, expat-debuginfo, expat-debugsource and 2 more | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2023 | expat, expat-debuginfo, expat-debugsource and 2 more | 2.5.0-1.amzn2023.0.2 |
| CBL-Mariner 1.0 | expat | 0:2.4.1-2.cm1 |
| CBL-Mariner 2.0 | expat | 0:2.4.3-1.cm2 |
| julia::Julia Ecosystem Security Advisories | Expat_jll | 2.4.4+0 |
| Photon OS 1.0 | expat | 2.2.9-3.ph1 |
| Photon OS 2.0 | expat | 2.2.9-3.ph2 |
| Photon OS 3.0 | expat | 2.2.9-3.ph3 |
| Photon OS 4.0 | expat, expat-devel, expat-docs and 1 more | 2.2.9-4.ph4 |
| alma 8 | expat, expat-devel, xmlrpc-c and 4 more | 2.2.5-8.el8_6.2 and 1 more |
Show all 137 entries from 68 sources
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | expat | 2.1.0-14.31.amzn1 |
| amazon linux 1 | expat-debuginfo | 2.1.0-14.31.amzn1 |
| amazon linux 1 | expat-devel | 2.1.0-14.31.amzn1 |
| amazon linux 2 | expat | 2.1.0-14.amzn2.0.1 |
| amazon linux 2 | expat-debuginfo | 2.1.0-14.amzn2.0.1 |
| amazon linux 2 | expat-devel | 2.1.0-14.amzn2.0.1 |
| amazon linux 2 | expat-static | 2.1.0-14.amzn2.0.1 |
| amazon linux 2022 | expat | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2022 | expat-debuginfo | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2022 | expat-debugsource | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2022 | expat-devel | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2022 | expat-static | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2023 | expat | 2.5.0-1.amzn2023.0.2 |
| amazon linux 2023 | expat-debuginfo | 2.5.0-1.amzn2023.0.2 |
| amazon linux 2023 | expat-debugsource | 2.5.0-1.amzn2023.0.2 |
| amazon linux 2023 | expat-devel | 2.5.0-1.amzn2023.0.2 |
| amazon linux 2023 | expat-static | 2.5.0-1.amzn2023.0.2 |
| CBL-Mariner 1.0 | expat | 0:2.4.1-2.cm1 |
| CBL-Mariner 2.0 | expat | 0:2.4.3-1.cm2 |
| julia::Julia Ecosystem Security Advisories | Expat_jll | 2.4.4+0 |
| Photon OS 1.0 | expat | 2.2.9-3.ph1 |
| Photon OS 2.0 | expat | 2.2.9-3.ph2 |
| Photon OS 3.0 | expat | 2.2.9-3.ph3 |
| Photon OS 4.0 | expat | 2.2.9-4.ph4 |
| Photon OS 4.0 | expat-devel | 2.2.9-4.ph4 |
| Photon OS 4.0 | expat-docs | 2.2.9-4.ph4 |
| Photon OS 4.0 | expat-libs | 2.2.9-4.ph4 |
| alma 8 | expat | 2.2.5-8.el8_6.2 |
| alma 8 | expat-devel | 2.2.5-8.el8_6.2 |
| alma 8 | xmlrpc-c | 1.51.0-8.el8 |
| alma 8 | xmlrpc-c-c++ | 1.51.0-8.el8 |
| alma 8 | xmlrpc-c-client | 1.51.0-8.el8 |
| alma 8 | xmlrpc-c-client++ | 1.51.0-8.el8 |
| alma 8 | xmlrpc-c-devel | 1.51.0-8.el8 |
| alpine 3.12 | expat | 2.2.10-r0 |
| alpine 3.13 | expat | 2.2.10-r2 |
| alpine 3.14 | expat | 2.4.3-r0 |
| alpine 3.15 | expat | 2.4.3-r0 |
| alpine 3.16 | expat | 2.4.3-r0 |
| alpine 3.17 | expat | 2.4.3-r0 |
| alpine 3.18 | expat | 2.4.3-r0 |
| alpine 3.19 | expat | 2.4.3-r0 |
| alpine 3.20 | expat | 2.4.3-r0 |
| alpine 3.21 | expat | 2.4.3-r0 |
| alpine 3.22 | expat | 2.4.3-r0 |
| alpine 3.23 | expat | 2.4.3-r0 |
| alpine 3.24 | expat | 2.4.3-r0 |
| alpine edge | expat | 2.4.3-r0 |
| bottlerocket | libexpat | 1.6.0-9749af99 |
| debian 10 | expat | 2.2.6-2+deb10u2 |
| debian 11 | expat | 2.2.10-2+deb11u1 |
| debian 11 | libxmltok | no fix listed |
| debian 12 | expat | 2.4.3-1 |
| debian 12 | libxmltok | no fix listed |
| debian 13 | expat | 2.4.3-1 |
| debian 14 | expat | 2.4.3-1 |
| debian 9 | expat | 2.2.0-2+deb9u4 |
| echo | expat | 2.4.3-1 |
| echo | libxmltok | no fix listed |
| Oracle Linux 7 | expat | 2.1.0-14.0.1.el7_9 |
| Oracle Linux 7 | expat-devel | 2.1.0-14.0.1.el7_9 |
| Oracle Linux 7 | expat-static | 2.1.0-14.0.1.el7_9 |
| Oracle Linux 8 | expat | 2.2.5-4.el8_5.3 |
| Oracle Linux 8 | expat-devel | 2.2.5-4.el8_5.3 |
| Oracle Linux 8 | xmlrpc-c | 1.51.0-8.el8 |
| Oracle Linux 8 | xmlrpc-c-c++ | 1.51.0-8.el8 |
| Oracle Linux 8 | xmlrpc-c-client | 1.51.0-8.el8 |
| Oracle Linux 8 | xmlrpc-c-client++ | 1.51.0-8.el8 |
| Oracle Linux 8 | xmlrpc-c-devel | 1.51.0-8.el8 |
| rapidfort debian 12 | libxmltok | 0:1.2-4.1 |
| rapidfort debian 13 | libxmltok | 0:1.2-4.1 |
| rapidfort Oracle Linux 9 | expat | 0:2.2.10-12.el9_0 |
| rapidfort ubuntu 20.04 | matanza | no fix listed |
| rapidfort ubuntu 20.04 | thunderbird | 1:140.7.1+build1-0ubuntu0.22.04.1 |
| rapidfort ubuntu 22.04 | matanza | no fix listed |
| rapidfort ubuntu 22.04 | thunderbird | 1:140.7.1+build1-0ubuntu0.22.04.1 |
| rapidfort ubuntu 24.04 | matanza | no fix listed |
| rapidfort ubuntu 24.04 | thunderbird | 1:140.7.1+build1-0ubuntu0.22.04.1 |
| Red Hat | expat | no fix listed |
| Red Hat | expat-devel | no fix listed |
| Red Hat | firefox | no fix listed |
| Red Hat | thunderbird | no fix listed |
| Red Hat | xulrunner | no fix listed |
| Red Hat | xulrunner-devel | no fix listed |
| rocky 8 | expat | 2.2.5-4.el8_5.3 |
| rocky 8 | expat-devel | 2.2.5-4.el8_5.3 |
| rocky 8 | xmlrpc-c | 1.51.0-8.el8 |
| rocky 8 | xmlrpc-c-client | 1.51.0-8.el8 |
| root.io debian 11 | rootio-expat | 2.2.10-2+deb11u1 |
| root.io debian 12 | rootio-expat | 2.4.3-1 |
| root.io debian 13 | rootio-expat | 2.4.3-1 |
| seal debian | expat | 2.2.10-2+deb11u5+sp999 |
| seal debian | seal-expat | 2.2.10-2+deb11u5+sp999 |
| seal Red Hat 6 | expat | 2.0.1-15.el6_10+sp999 |
| seal Red Hat 6 | seal-expat | 2.0.1-15.el6_10+sp999 |
| seal Red Hat 7 | expat | 2.1.0-15.el7_9+sp999 |
| seal Red Hat 7 | seal-expat | 2.1.0-15.el7_9+sp999 |
| seal Red Hat 8 | expat | 2.2.5-16.el8_10+sp999, 2.2.5-4.0.1.el8_5.3+sp999 |
| seal Red Hat 8 | seal-expat | 2.2.5-16.el8_10+sp999, 2.2.5-4.0.1.el8_5.3+sp999 |
| ubuntu 14.04-ESM | expat | 2.1.0-4ubuntu1.4+esm4 |
| ubuntu 16.04-ESM | expat | 2.1.0-7ubuntu0.16.04.5+esm2 |
| ubuntu 16.04-ESM | libxmltok | 1.2-3ubuntu0.16.04.1~esm2 |
| ubuntu 18.04 | expat | 2.2.5-3ubuntu0.4 |
| ubuntu 18.04 | firefox | 98.0+build3-0ubuntu0.18.04.2 |
| ubuntu 18.04-ESM | expat | 2.2.5-3ubuntu0.4 |
| ubuntu 18.04-ESM | libxmltok | 1.2-4ubuntu0.18.04.1~esm4 |
| ubuntu 20.04 | expat | 2.2.9-1ubuntu0.2 |
| ubuntu 20.04 | firefox | 98.0+build3-0ubuntu0.20.04.2 |
| ubuntu 20.04 | thunderbird | 1:91.11.0+build2-0ubuntu0.20.04.1 |
| ubuntu 20.04-ESM | expat | 2.2.9-1ubuntu0.2 |
| ubuntu 20.04-ESM | libxmltok | 1.2-4ubuntu0.20.04.1~esm4 |
| ubuntu 21.10 | expat | 2.4.1-2ubuntu0.1 |
| ubuntu 21.10 | firefox | 98.0+build3-0ubuntu0.21.10.2 |
| ubuntu 22.04 | expat | 2.4.3-1 |
| ubuntu 22.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 22.04 | libxmltok | no fix listed |
| ubuntu 22.04 | thunderbird | 1:91.11.0+build2-0ubuntu0.22.04.1 |
| ubuntu 22.10 | expat | 2.4.3-1 |
| ubuntu 22.10 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 23.04 | expat | 2.4.3-1 |
| ubuntu 23.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 23.10 | expat | 2.4.3-1 |
| ubuntu 23.10 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 24.04 | expat | 2.4.3-1 |
| ubuntu 24.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 24.04 | libxmltok | no fix listed |
| ubuntu 24.10 | expat | 2.4.3-1 |
| ubuntu 24.10 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 24.10 | libxmltok | 1.2-4.1ubuntu3.1 |
| ubuntu 25.04 | expat | 2.4.3-1 |
| ubuntu 25.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 25.10 | expat | 2.4.3-1 |
| ubuntu 25.10 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 26.04 | expat | 2.4.3-1 |
| ubuntu 26.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 26.10 | expat | 2.4.3-1 |
| ubuntu 26.10 | firefox | 1:1snap1-0ubuntu1 |
References
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22823
- http://www.openwall.com/lists/oss-security/2022/01/17/3
- https://access.redhat.com/errata/RHSA-2022:7692
- https://access.redhat.com/security/cve/CVE-2022-22823
- https://bugzilla.redhat.com/2044455
- https://bugzilla.redhat.com/2044457
- https://bugzilla.redhat.com/2044464
- https://bugzilla.redhat.com/2044467
All 42 references
- https://bugzilla.redhat.com/2044479
- https://bugzilla.redhat.com/2044484
- https://bugzilla.redhat.com/2044488
- https://bugzilla.redhat.com/show_bug.cgi?id=2044455
- https://bugzilla.redhat.com/show_bug.cgi?id=2044457
- https://bugzilla.redhat.com/show_bug.cgi?id=2044464
- https://bugzilla.redhat.com/show_bug.cgi?id=2044467
- https://bugzilla.redhat.com/show_bug.cgi?id=2044479
- https://bugzilla.redhat.com/show_bug.cgi?id=2044484
- https://bugzilla.redhat.com/show_bug.cgi?id=2044488
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-484086.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46143
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22822
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22823
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22824
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22825
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22826
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22827
- https://errata.almalinux.org/8/ALSA-2022-7692.html
- https://errata.rockylinux.org/RLSA-2022:7692
- https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-w95j-547c-72pg
- https://github.com/libexpat/libexpat/pull/539
- https://linux.oracle.com/cve/CVE-2022-22823.html
- https://linux.oracle.com/errata/ELSA-2022-7692.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-22823
- https://security.gentoo.org/glsa/202209-24
- https://ubuntu.com/security/notices/USN-5288-1
- https://ubuntu.com/security/notices/USN-5455-1
- https://ubuntu.com/security/notices/USN-7199-1
- https://www.cve.org/CVERecord?id=CVE-2022-22823
- https://www.debian.org/security/2022/dsa-5073
- https://www.tenable.com/security/tns-2022-05