critical
CVE-2022-23852
expat: Integer overflow in function XML_GetBuffer
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Julia9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Amazon, CBL-Mariner, Julia, Photon OS. Rated lower by AlmaLinux (high), Oracle (high), Rocky Linux (high), Red Hat (medium), Bottlerocket (medium), Ubuntu (medium).
Description
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | expat, expat-debuginfo, expat-devel | 2.1.0-12.25.amzn1 |
| amazon linux 2 | expat, expat-debuginfo, expat-devel and 1 more | 2.1.0-12.amzn2.0.1 |
| amazon linux 2022 | expat, expat-debuginfo, expat-debugsource and 2 more | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2023 | expat, expat-debuginfo, expat-debugsource and 2 more | 2.5.0-1.amzn2023.0.2 |
| CBL-Mariner 1.0 | expat | 0:2.4.4-1.cm1 |
| CBL-Mariner 2.0 | expat | 0:2.4.8-1.cm2 |
| julia::Julia Ecosystem Security Advisories | Expat_jll | 2.4.4+0 |
| Photon OS 1.0 | expat | 2.2.9-4.ph1 |
| Photon OS 2.0 | expat | 2.2.9-4.ph2 |
| Photon OS 3.0 | expat | 2.2.9-6.ph3 |
| Photon OS 4.0 | expat, expat-devel, expat-docs and 1 more | 2.2.9-5.ph4 |
| alma 8 | expat, expat-devel | 2.2.5-8.el8_6.2 |
Show all 129 entries from 68 sources
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | expat | 2.1.0-12.25.amzn1 |
| amazon linux 1 | expat-debuginfo | 2.1.0-12.25.amzn1 |
| amazon linux 1 | expat-devel | 2.1.0-12.25.amzn1 |
| amazon linux 2 | expat | 2.1.0-12.amzn2.0.1 |
| amazon linux 2 | expat-debuginfo | 2.1.0-12.amzn2.0.1 |
| amazon linux 2 | expat-devel | 2.1.0-12.amzn2.0.1 |
| amazon linux 2 | expat-static | 2.1.0-12.amzn2.0.1 |
| amazon linux 2022 | expat | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2022 | expat-debuginfo | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2022 | expat-debugsource | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2022 | expat-devel | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2022 | expat-static | 2.4.7-1.amzn2022.0.1 |
| amazon linux 2023 | expat | 2.5.0-1.amzn2023.0.2 |
| amazon linux 2023 | expat-debuginfo | 2.5.0-1.amzn2023.0.2 |
| amazon linux 2023 | expat-debugsource | 2.5.0-1.amzn2023.0.2 |
| amazon linux 2023 | expat-devel | 2.5.0-1.amzn2023.0.2 |
| amazon linux 2023 | expat-static | 2.5.0-1.amzn2023.0.2 |
| CBL-Mariner 1.0 | expat | 0:2.4.4-1.cm1 |
| CBL-Mariner 2.0 | expat | 0:2.4.8-1.cm2 |
| julia::Julia Ecosystem Security Advisories | Expat_jll | 2.4.4+0 |
| Photon OS 1.0 | expat | 2.2.9-4.ph1 |
| Photon OS 2.0 | expat | 2.2.9-4.ph2 |
| Photon OS 3.0 | expat | 2.2.9-6.ph3 |
| Photon OS 4.0 | expat | 2.2.9-5.ph4 |
| Photon OS 4.0 | expat-devel | 2.2.9-5.ph4 |
| Photon OS 4.0 | expat-docs | 2.2.9-5.ph4 |
| Photon OS 4.0 | expat-libs | 2.2.9-5.ph4 |
| alma 8 | expat | 2.2.5-8.el8_6.2 |
| alma 8 | expat-devel | 2.2.5-8.el8_6.2 |
| alpine 3.12 | expat | 2.2.10-r1 |
| alpine 3.13 | expat | 2.2.10-r3 |
| alpine 3.14 | expat | 2.4.4-r0 |
| alpine 3.15 | expat | 2.4.4-r0 |
| alpine 3.15 | qt5-qtwebengine | 5.15.3_git20211127-r4 |
| alpine 3.16 | expat | 2.4.4-r0 |
| alpine 3.16 | qt5-qtwebengine | 5.15.3_git20220121-r4 |
| alpine 3.17 | expat | 2.4.4-r0 |
| alpine 3.17 | qt5-qtwebengine | 5.15.3_git20220121-r4 |
| alpine 3.18 | expat | 2.4.4-r0 |
| alpine 3.18 | qt5-qtwebengine | 5.15.3_git20220121-r4 |
| alpine 3.19 | expat | 2.4.4-r0 |
| alpine 3.19 | qt5-qtwebengine | 5.15.3_git20220121-r4 |
| alpine 3.20 | expat | 2.4.4-r0 |
| alpine 3.20 | qt5-qtwebengine | 5.15.3_git20220121-r4 |
| alpine 3.21 | expat | 2.4.4-r0 |
| alpine 3.21 | qt5-qtwebengine | 5.15.3_git20220121-r4 |
| alpine 3.22 | expat | 2.4.4-r0 |
| alpine 3.22 | qt5-qtwebengine | 5.15.3_git20220121-r4 |
| alpine 3.23 | expat | 2.4.4-r0 |
| alpine 3.23 | qt5-qtwebengine | 5.15.3_git20220121-r4 |
| alpine 3.24 | expat | 2.4.4-r0 |
| alpine edge | expat | 2.4.4-r0 |
| bottlerocket | libexpat | 1.6.0-9749af99 |
| debian 10 | expat | 2.2.6-2+deb10u2 |
| debian 11 | expat | 2.2.10-2+deb11u1 |
| debian 11 | libxmltok | no fix listed |
| debian 12 | expat | 2.4.3-2 |
| debian 12 | libxmltok | no fix listed |
| debian 13 | expat | 2.4.3-2 |
| debian 14 | expat | 2.4.3-2 |
| debian 9 | expat | 2.2.0-2+deb9u5 |
| echo | expat | 2.4.3-2 |
| echo | libxmltok | no fix listed |
| Oracle Linux 7 | expat | 2.1.0-14.0.1.el7_9 |
| Oracle Linux 7 | expat-devel | 2.1.0-14.0.1.el7_9 |
| Oracle Linux 7 | expat-static | 2.1.0-14.0.1.el7_9 |
| Oracle Linux 8 | expat | 2.2.5-4.el8_5.3 |
| Oracle Linux 8 | expat-devel | 2.2.5-4.el8_5.3 |
| rapidfort debian 12 | libxmltok | 0:1.2-4.1 |
| rapidfort debian 13 | libxmltok | 0:1.2-4.1 |
| rapidfort Oracle Linux 9 | expat | 0:2.2.10-12.el9_0 |
| rapidfort ubuntu 20.04 | matanza | no fix listed |
| rapidfort ubuntu 20.04 | thunderbird | no fix listed |
| rapidfort ubuntu 22.04 | matanza | no fix listed |
| rapidfort ubuntu 22.04 | thunderbird | no fix listed |
| rapidfort ubuntu 24.04 | matanza | no fix listed |
| rapidfort ubuntu 24.04 | thunderbird | no fix listed |
| Red Hat | expat | no fix listed |
| Red Hat | expat-devel | no fix listed |
| Red Hat | firefox | no fix listed |
| Red Hat | thunderbird | no fix listed |
| Red Hat | xulrunner | no fix listed |
| Red Hat | xulrunner-devel | no fix listed |
| rocky 8 | expat | 2.2.5-4.el8_5.3 |
| rocky 8 | expat-devel | 2.2.5-4.el8_5.3 |
| root.io debian 11 | rootio-expat | 2.2.10-2+deb11u1 |
| root.io debian 12 | rootio-expat | 2.4.3-2 |
| root.io debian 13 | rootio-expat | 2.4.3-2 |
| seal debian | expat | 2.2.10-2+deb11u5+sp999 |
| seal debian | seal-expat | 2.2.10-2+deb11u5+sp999 |
| seal Red Hat 6 | expat | 2.0.1-15.el6_10+sp999 |
| seal Red Hat 6 | seal-expat | 2.0.1-15.el6_10+sp999 |
| seal Red Hat 7 | expat | 2.1.0-15.el7_9+sp999 |
| seal Red Hat 7 | seal-expat | 2.1.0-15.el7_9+sp999 |
| seal Red Hat 8 | expat | 2.2.5-16.el8_10+sp999, 2.2.5-4.0.1.el8_5.3+sp999 |
| seal Red Hat 8 | seal-expat | 2.2.5-16.el8_10+sp999, 2.2.5-4.0.1.el8_5.3+sp999 |
| ubuntu 14.04-ESM | expat | 2.1.0-4ubuntu1.4+esm4 |
| ubuntu 16.04-ESM | expat | 2.1.0-7ubuntu0.16.04.5+esm2 |
| ubuntu 18.04 | expat | 2.2.5-3ubuntu0.4 |
| ubuntu 18.04-ESM | coin3 | no fix listed |
| ubuntu 18.04-ESM | expat | 2.2.5-3ubuntu0.4 |
| ubuntu 18.04-ESM | tdom | no fix listed |
| ubuntu 18.04-ESM | vnc4 | no fix listed |
| ubuntu 18.04-ESM | wbxml2 | no fix listed |
| ubuntu 20.04 | expat | 2.2.9-1ubuntu0.2 |
| ubuntu 20.04-ESM | expat | 2.2.9-1ubuntu0.2 |
| ubuntu 20.04-ESM | tdom | no fix listed |
| ubuntu 20.04-ESM | wbxml2 | no fix listed |
| ubuntu 21.10 | expat | 2.4.1-2ubuntu0.1 |
| ubuntu 22.04 | expat | 2.4.3-2 |
| ubuntu 22.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 22.10 | expat | 2.4.3-2 |
| ubuntu 22.10 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 23.04 | expat | 2.4.3-2 |
| ubuntu 23.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 23.10 | expat | 2.4.3-2 |
| ubuntu 23.10 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 24.04 | expat | 2.4.3-2 |
| ubuntu 24.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 24.10 | expat | 2.4.3-2 |
| ubuntu 24.10 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 25.04 | expat | 2.4.3-2 |
| ubuntu 25.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 25.10 | expat | 2.4.3-2 |
| ubuntu 25.10 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 26.04 | expat | 2.4.3-2 |
| ubuntu 26.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 26.10 | expat | 2.4.3-2 |
| ubuntu 26.10 | firefox | 1:1snap1-0ubuntu1 |
References
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23852
- https://access.redhat.com/errata/RHSA-2022:0951
- https://access.redhat.com/security/cve/CVE-2022-23852
- https://bugzilla.redhat.com/2044451
- https://bugzilla.redhat.com/2044455
- https://bugzilla.redhat.com/2044457
- https://bugzilla.redhat.com/2044464
- https://bugzilla.redhat.com/2044467
All 58 references
- https://bugzilla.redhat.com/2044479
- https://bugzilla.redhat.com/2044484
- https://bugzilla.redhat.com/2044488
- https://bugzilla.redhat.com/2044613
- https://bugzilla.redhat.com/2056363
- https://bugzilla.redhat.com/2056366
- https://bugzilla.redhat.com/2056370
- https://bugzilla.redhat.com/show_bug.cgi?id=2044451
- https://bugzilla.redhat.com/show_bug.cgi?id=2044455
- https://bugzilla.redhat.com/show_bug.cgi?id=2044457
- https://bugzilla.redhat.com/show_bug.cgi?id=2044464
- https://bugzilla.redhat.com/show_bug.cgi?id=2044467
- https://bugzilla.redhat.com/show_bug.cgi?id=2044479
- https://bugzilla.redhat.com/show_bug.cgi?id=2044484
- https://bugzilla.redhat.com/show_bug.cgi?id=2044488
- https://bugzilla.redhat.com/show_bug.cgi?id=2044613
- https://bugzilla.redhat.com/show_bug.cgi?id=2056363
- https://bugzilla.redhat.com/show_bug.cgi?id=2056366
- https://bugzilla.redhat.com/show_bug.cgi?id=2056370
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-484086.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45960
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46143
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22822
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22823
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22824
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22825
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22826
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22827
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23852
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25235
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25236
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25315
- https://errata.almalinux.org/8/ALSA-2022-0951.html
- https://errata.rockylinux.org/RLSA-2022:0951
- https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-q23q-h3vx-q22h
- https://github.com/libexpat/libexpat/pull/550
- https://linux.oracle.com/cve/CVE-2022-23852.html
- https://linux.oracle.com/errata/ELSA-2022-1069.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-23852
- https://security.gentoo.org/glsa/202209-24
- https://security.netapp.com/advisory/ntap-20220217-0001/
- https://ubuntu.com/security/notices/USN-5288-1
- https://www.cve.org/CVERecord?id=CVE-2022-23852
- https://www.debian.org/security/2022/dsa-5073
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.tenable.com/security/tns-2022-05