addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
la función addBinding en el archivo xmlparse.c en Expat (también se conoce como libexpat) antes de 2.4.3 presenta un desbordamiento de enteros
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:N/AC:L/Au:N/C:P/I:P/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-190
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-190
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| libexpat_project | libexpat | * | <built-in method update of dict object at 0x7fd36afa7300> | Application |
| tenable | nessus | * | <built-in method update of dict object at 0x7fd319c75080> | Application |
| tenable | nessus | * | <built-in method update of dict object at 0x7fd384e95bc0> | Application |
| siemens | sinema_remote_connect_server | * | <built-in method update of dict object at 0x7fd36be60e80> | Application |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7fd369c0cd40> | Operating System |
| debian | debian_linux | 11.0 | <built-in method update of dict object at 0x7fd369c0e7c0> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |