Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
CVE-2022-40674
See a problem?
Please try reporting it
to the source
first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-40674
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-40674.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-40674
Downstream
ALPINE-CVE-2022-40674
DEBIAN-CVE-2022-40674
DLA-3119-1
DSA-5236-1
OESA-2022-1932
OESA-2022-2019
RHSA-2022:6831
RHSA-2022:6832
RHSA-2022:6833
RHSA-2022:6834
RHSA-2022:6838
RHSA-2022:6878
RHSA-2022:6921
RHSA-2022:6967
RHSA-2022:6995
RHSA-2022:6996
RHSA-2022:6997
RHSA-2022:6998
RHSA-2022:7019
RHSA-2022:7020
RHSA-2022:7021
RHSA-2022:7022
RHSA-2022:7023
RHSA-2022:7024
RHSA-2022:7025
RHSA-2022:7026
RHSA-2022:8598
RHSA-2023:3068
SUSE-SU-2022:3466-1
SUSE-SU-2022:3489-1
SUSE-SU-2022:3597-1
UBUNTU-CVE-2022-40674
USN-5638-1
USN-5638-2
USN-5638-4
USN-5726-1
openSUSE-SU-2024:12359-1
openSUSE-SU-2024:12518-1
openSUSE-SU-2024:14572-1
Related
ALSA-2022:6838
ALSA-2022:6878
ALSA-2022:7020
ALSA-2022:7023
ALSA-2022:7024
ALSA-2022:7026
ALSA-2023:3068
CGA-wvgr-5787-hj6m
MGASA-2022-0352
MGASA-2022-0397
MGASA-2022-0399
RLSA-2022:6838
RLSA-2022:6878
RLSA-2022:7023
RLSA-2022:7024
SUSE-SU-2022:3466-1
SUSE-SU-2022:3489-1
SUSE-SU-2022:3597-1
openSUSE-SU-2024:12359-1
openSUSE-SU-2024:12518-1
openSUSE-SU-2024:14572-1
Published
2022-09-14T11:15:54Z
Modified
2025-09-19T14:10:46.462301Z
Severity
8.1 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
[none]
Details
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
References
https://github.com/libexpat/libexpat/pull/629
https://github.com/libexpat/libexpat/pull/640
https://lists.debian.org/debian-lts-announce/2022/09/msg00029.html
https://security.gentoo.org/glsa/202209-24
https://security.gentoo.org/glsa/202211-06
https://security.netapp.com/advisory/ntap-20221028-0008/
https://www.debian.org/security/2022/dsa-5236
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GSVZN3IJ6OCPSJL7AEX3ZHSHAHFOGESK/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J2IGJNHFV53PYST7VQV3T4NHVYAMXA36/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQB6FJAM5YQ35SF5B2MN25Y2FX56EOEZ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2ZKEPGFCZ7R6DRVH3K6RBJPT42ZBEG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCGBVQQ47URGJAZWHCISHDWF6QBTV2LE/
https://security.alpinelinux.org/vuln/CVE-2022-40674
Affected packages
Alpine:v3.13
expat
Package
Name
expat
Purl
pkg:apk/alpine/expat?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.2.10-r7
Affected versions
2.*
2.0.1-r0
2.0.1-r1
2.0.1-r2
2.0.1-r3
2.0.1-r4
2.0.1-r5
2.0.1-r6
2.1.0-r0
2.1.0-r1
2.1.0-r2
2.1.1-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.2.2-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.5-r0
2.2.6-r0
2.2.7-r0
2.2.7-r1
2.2.8-r0
2.2.9-r0
2.2.9-r1
2.2.10-r0
2.2.10-r1
2.2.10-r2
2.2.10-r3
2.2.10-r4
2.2.10-r5
2.2.10-r6
Alpine:v3.14
expat
Package
Name
expat
Purl
pkg:apk/alpine/expat?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.4.9-r0
Affected versions
2.*
2.0.1-r0
2.0.1-r1
2.0.1-r2
2.0.1-r3
2.0.1-r4
2.0.1-r5
2.0.1-r6
2.1.0-r0
2.1.0-r1
2.1.0-r2
2.1.1-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.2.2-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.5-r0
2.2.6-r0
2.2.7-r0
2.2.7-r1
2.2.8-r0
2.2.9-r0
2.2.9-r1
2.2.10-r0
2.2.10-r1
2.3.0-r0
2.4.1-r0
2.4.3-r0
2.4.4-r0
2.4.5-r0
2.4.6-r0
2.4.7-r0
Alpine:v3.15
expat
Package
Name
expat
Purl
pkg:apk/alpine/expat?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.4.9-r0
Affected versions
2.*
2.0.1-r0
2.0.1-r1
2.0.1-r2
2.0.1-r3
2.0.1-r4
2.0.1-r5
2.0.1-r6
2.1.0-r0
2.1.0-r1
2.1.0-r2
2.1.1-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.2.2-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.5-r0
2.2.6-r0
2.2.7-r0
2.2.7-r1
2.2.8-r0
2.2.9-r0
2.2.9-r1
2.2.10-r0
2.2.10-r1
2.3.0-r0
2.4.1-r0
2.4.3-r0
2.4.4-r0
2.4.5-r0
2.4.6-r0
2.4.7-r0
Alpine:v3.16
expat
Package
Name
expat
Purl
pkg:apk/alpine/expat?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.4.9-r0
Affected versions
2.*
2.0.1-r0
2.0.1-r1
2.0.1-r2
2.0.1-r3
2.0.1-r4
2.0.1-r5
2.0.1-r6
2.1.0-r0
2.1.0-r1
2.1.0-r2
2.1.1-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.2.2-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.5-r0
2.2.6-r0
2.2.7-r0
2.2.7-r1
2.2.8-r0
2.2.9-r0
2.2.9-r1
2.2.10-r0
2.2.10-r1
2.3.0-r0
2.4.1-r0
2.4.2-r0
2.4.3-r0
2.4.4-r0
2.4.5-r0
2.4.6-r0
2.4.7-r0
2.4.8-r0
Alpine:v3.17
expat
Package
Name
expat
Purl
pkg:apk/alpine/expat?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.4.9-r0
Affected versions
2.*
2.0.1-r0
2.0.1-r1
2.0.1-r2
2.0.1-r3
2.0.1-r4
2.0.1-r5
2.0.1-r6
2.1.0-r0
2.1.0-r1
2.1.0-r2
2.1.1-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.2.2-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.5-r0
2.2.6-r0
2.2.7-r0
2.2.7-r1
2.2.8-r0
2.2.9-r0
2.2.9-r1
2.2.10-r0
2.2.10-r1
2.3.0-r0
2.4.1-r0
2.4.2-r0
2.4.3-r0
2.4.4-r0
2.4.5-r0
2.4.6-r0
2.4.7-r0
2.4.8-r0
2.4.8-r1
Alpine:v3.18
expat
Package
Name
expat
Purl
pkg:apk/alpine/expat?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.4.9-r0
Affected versions
2.*
2.0.1-r0
2.0.1-r1
2.0.1-r2
2.0.1-r3
2.0.1-r4
2.0.1-r5
2.0.1-r6
2.1.0-r0
2.1.0-r1
2.1.0-r2
2.1.1-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.2.2-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.5-r0
2.2.6-r0
2.2.7-r0
2.2.7-r1
2.2.8-r0
2.2.9-r0
2.2.9-r1
2.2.10-r0
2.2.10-r1
2.3.0-r0
2.4.1-r0
2.4.2-r0
2.4.3-r0
2.4.4-r0
2.4.5-r0
2.4.6-r0
2.4.7-r0
2.4.8-r0
2.4.8-r1
Alpine:v3.19
expat
Package
Name
expat
Purl
pkg:apk/alpine/expat?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.4.9-r0
Affected versions
2.*
2.0.1-r0
2.0.1-r1
2.0.1-r2
2.0.1-r3
2.0.1-r4
2.0.1-r5
2.0.1-r6
2.1.0-r0
2.1.0-r1
2.1.0-r2
2.1.1-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.2.2-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.5-r0
2.2.6-r0
2.2.7-r0
2.2.7-r1
2.2.8-r0
2.2.9-r0
2.2.9-r1
2.2.10-r0
2.2.10-r1
2.3.0-r0
2.4.1-r0
2.4.2-r0
2.4.3-r0
2.4.4-r0
2.4.5-r0
2.4.6-r0
2.4.7-r0
2.4.8-r0
2.4.8-r1
Alpine:v3.20
expat
Package
Name
expat
Purl
pkg:apk/alpine/expat?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.4.9-r0
Affected versions
2.*
2.0.1-r0
2.0.1-r1
2.0.1-r2
2.0.1-r3
2.0.1-r4
2.0.1-r5
2.0.1-r6
2.1.0-r0
2.1.0-r1
2.1.0-r2
2.1.1-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.2.2-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.5-r0
2.2.6-r0
2.2.7-r0
2.2.7-r1
2.2.8-r0
2.2.9-r0
2.2.9-r1
2.2.10-r0
2.2.10-r1
2.3.0-r0
2.4.1-r0
2.4.2-r0
2.4.3-r0
2.4.4-r0
2.4.5-r0
2.4.6-r0
2.4.7-r0
2.4.8-r0
2.4.8-r1
Alpine:v3.21
expat
Package
Name
expat
Purl
pkg:apk/alpine/expat?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.4.9-r0
Affected versions
2.*
2.0.1-r0
2.0.1-r1
2.0.1-r2
2.0.1-r3
2.0.1-r4
2.0.1-r5
2.0.1-r6
2.1.0-r0
2.1.0-r1
2.1.0-r2
2.1.1-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.2.2-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.5-r0
2.2.6-r0
2.2.7-r0
2.2.7-r1
2.2.8-r0
2.2.9-r0
2.2.9-r1
2.2.10-r0
2.2.10-r1
2.3.0-r0
2.4.1-r0
2.4.2-r0
2.4.3-r0
2.4.4-r0
2.4.5-r0
2.4.6-r0
2.4.7-r0
2.4.8-r0
2.4.8-r1
Alpine:v3.22
expat
Package
Name
expat
Purl
pkg:apk/alpine/expat?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.4.9-r0
Affected versions
2.*
2.0.1-r0
2.0.1-r1
2.0.1-r2
2.0.1-r3
2.0.1-r4
2.0.1-r5
2.0.1-r6
2.1.0-r0
2.1.0-r1
2.1.0-r2
2.1.1-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.2.2-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.5-r0
2.2.6-r0
2.2.7-r0
2.2.7-r1
2.2.8-r0
2.2.9-r0
2.2.9-r1
2.2.10-r0
2.2.10-r1
2.3.0-r0
2.4.1-r0
2.4.2-r0
2.4.3-r0
2.4.4-r0
2.4.5-r0
2.4.6-r0
2.4.7-r0
2.4.8-r0
2.4.8-r1
Git
github.com/libexpat/libexpat
Affected ranges
Type
GIT
Repo
https://github.com/libexpat/libexpat
Events
Introduced
0
Unknown introduced commit / All previous commits are affected
Fixed
d77291a4824d78e697c5dc2b8024fd65ab31e209
Affected versions
Other
REC1_0
R_1_95_0
R_1_95_2
R_1_95_3
R_1_95_4
R_1_95_5
R_1_95_6
R_1_95_7
R_1_95_8
R_2_0_0
R_2_0_1
R_2_1_0
R_2_1_1
R_2_2_0
R_2_2_1
R_2_2_10
R_2_2_2
R_2_2_3
R_2_2_4
R_2_2_5
R_2_2_6
R_2_2_7
R_2_2_8
R_2_2_9
R_2_3_0
R_2_4_0
R_2_4_1
R_2_4_2
R_2_4_3
R_2_4_4
R_2_4_5
R_2_4_6
R_2_4_7
R_2_4_8
V1990307
V19981122
V19981231
V19990109
V19990425
V19990626
V19990709
V19990728
V19991013
V1_0
V1_1
V20000512
beta2
beta3
beta4
jclark-orig
libexpat-alpha-1
sourceforge_init
start
CVE-2022-40674 - OSV