CVE-2022-40674

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-40674

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-40674.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2022-40674

Downstream

DLA-3119-1

DSA-5236-1

OESA-2022-1932

OESA-2022-2019

RHSA-2022:6831

RHSA-2022:6832

RHSA-2022:6833

RHSA-2022:6834

RHSA-2022:6838

RHSA-2022:6878

RHSA-2022:6921

RHSA-2022:6967

RHSA-2022:6995

RHSA-2022:6996

RHSA-2022:6997

RHSA-2022:6998

RHSA-2022:7019

RHSA-2022:7020

RHSA-2022:7021

RHSA-2022:7022

RHSA-2022:7023

RHSA-2022:7024

RHSA-2022:7025

RHSA-2022:7026

RHSA-2022:8598

RHSA-2023:3068

SUSE-SU-2022:3466-1

SUSE-SU-2022:3489-1

SUSE-SU-2022:3597-1

UBUNTU-CVE-2022-40674

USN-5638-1

USN-5638-2

USN-5638-4

USN-5726-1

openSUSE-SU-2024:12359-1

openSUSE-SU-2024:12518-1

openSUSE-SU-2024:14572-1

Related

Published

2022-09-14T11:15:54Z

Modified

2025-07-01T14:13:44.620679Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

References

Affected packages

Alpine:v3.13 / expat

Package

Name: expat
Purl: pkg:apk/alpine/expat?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.10-r7

Affected versions

2.*

2.0.1-r0

2.0.1-r1

2.0.1-r2

2.0.1-r3

2.0.1-r4

2.0.1-r5

2.0.1-r6

2.1.0-r0

2.1.0-r1

2.1.0-r2

2.1.1-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.2.2-r0

2.2.3-r0

2.2.3-r1

2.2.4-r0

2.2.5-r0

2.2.6-r0

2.2.7-r0

2.2.7-r1

2.2.8-r0

2.2.9-r0

2.2.9-r1

2.2.10-r0

2.2.10-r1

2.2.10-r2

2.2.10-r3

2.2.10-r4

2.2.10-r5

2.2.10-r6

Alpine:v3.14 / expat

Package

Name: expat
Purl: pkg:apk/alpine/expat?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.9-r0

Affected versions

2.*

2.0.1-r0

2.0.1-r1

2.0.1-r2

2.0.1-r3

2.0.1-r4

2.0.1-r5

2.0.1-r6

2.1.0-r0

2.1.0-r1

2.1.0-r2

2.1.1-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.2.2-r0

2.2.3-r0

2.2.3-r1

2.2.4-r0

2.2.5-r0

2.2.6-r0

2.2.7-r0

2.2.7-r1

2.2.8-r0

2.2.9-r0

2.2.9-r1

2.2.10-r0

2.2.10-r1

2.3.0-r0

2.4.1-r0

2.4.3-r0

2.4.4-r0

2.4.5-r0

2.4.6-r0

2.4.7-r0

Alpine:v3.15 / expat

Package

Name: expat
Purl: pkg:apk/alpine/expat?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.9-r0

Affected versions

2.*

2.0.1-r0

2.0.1-r1

2.0.1-r2

2.0.1-r3

2.0.1-r4

2.0.1-r5

2.0.1-r6

2.1.0-r0

2.1.0-r1

2.1.0-r2

2.1.1-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.2.2-r0

2.2.3-r0

2.2.3-r1

2.2.4-r0

2.2.5-r0

2.2.6-r0

2.2.7-r0

2.2.7-r1

2.2.8-r0

2.2.9-r0

2.2.9-r1

2.2.10-r0

2.2.10-r1

2.3.0-r0

2.4.1-r0

2.4.3-r0

2.4.4-r0

2.4.5-r0

2.4.6-r0

2.4.7-r0

Alpine:v3.16 / expat

Package

Name: expat
Purl: pkg:apk/alpine/expat?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.9-r0

Affected versions

2.*

2.0.1-r0

2.0.1-r1

2.0.1-r2

2.0.1-r3

2.0.1-r4

2.0.1-r5

2.0.1-r6

2.1.0-r0

2.1.0-r1

2.1.0-r2

2.1.1-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.2.2-r0

2.2.3-r0

2.2.3-r1

2.2.4-r0

2.2.5-r0

2.2.6-r0

2.2.7-r0

2.2.7-r1

2.2.8-r0

2.2.9-r0

2.2.9-r1

2.2.10-r0

2.2.10-r1

2.3.0-r0

2.4.1-r0

2.4.2-r0

2.4.3-r0

2.4.4-r0

2.4.5-r0

2.4.6-r0

2.4.7-r0

2.4.8-r0

Alpine:v3.17 / expat

Package

Name: expat
Purl: pkg:apk/alpine/expat?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.9-r0

Affected versions

2.*

2.0.1-r0

2.0.1-r1

2.0.1-r2

2.0.1-r3

2.0.1-r4

2.0.1-r5

2.0.1-r6

2.1.0-r0

2.1.0-r1

2.1.0-r2

2.1.1-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.2.2-r0

2.2.3-r0

2.2.3-r1

2.2.4-r0

2.2.5-r0

2.2.6-r0

2.2.7-r0

2.2.7-r1

2.2.8-r0

2.2.9-r0

2.2.9-r1

2.2.10-r0

2.2.10-r1

2.3.0-r0

2.4.1-r0

2.4.2-r0

2.4.3-r0

2.4.4-r0

2.4.5-r0

2.4.6-r0

2.4.7-r0

2.4.8-r0

2.4.8-r1

Alpine:v3.18 / expat

Package

Name: expat
Purl: pkg:apk/alpine/expat?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.9-r0

Affected versions

2.*

2.0.1-r0

2.0.1-r1

2.0.1-r2

2.0.1-r3

2.0.1-r4

2.0.1-r5

2.0.1-r6

2.1.0-r0

2.1.0-r1

2.1.0-r2

2.1.1-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.2.2-r0

2.2.3-r0

2.2.3-r1

2.2.4-r0

2.2.5-r0

2.2.6-r0

2.2.7-r0

2.2.7-r1

2.2.8-r0

2.2.9-r0

2.2.9-r1

2.2.10-r0

2.2.10-r1

2.3.0-r0

2.4.1-r0

2.4.2-r0

2.4.3-r0

2.4.4-r0

2.4.5-r0

2.4.6-r0

2.4.7-r0

2.4.8-r0

2.4.8-r1

Alpine:v3.19 / expat

Package

Name: expat
Purl: pkg:apk/alpine/expat?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.9-r0

Affected versions

2.*

2.0.1-r0

2.0.1-r1

2.0.1-r2

2.0.1-r3

2.0.1-r4

2.0.1-r5

2.0.1-r6

2.1.0-r0

2.1.0-r1

2.1.0-r2

2.1.1-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.2.2-r0

2.2.3-r0

2.2.3-r1

2.2.4-r0

2.2.5-r0

2.2.6-r0

2.2.7-r0

2.2.7-r1

2.2.8-r0

2.2.9-r0

2.2.9-r1

2.2.10-r0

2.2.10-r1

2.3.0-r0

2.4.1-r0

2.4.2-r0

2.4.3-r0

2.4.4-r0

2.4.5-r0

2.4.6-r0

2.4.7-r0

2.4.8-r0

2.4.8-r1

Alpine:v3.20 / expat

Package

Name: expat
Purl: pkg:apk/alpine/expat?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.9-r0

Affected versions

2.*

2.0.1-r0

2.0.1-r1

2.0.1-r2

2.0.1-r3

2.0.1-r4

2.0.1-r5

2.0.1-r6

2.1.0-r0

2.1.0-r1

2.1.0-r2

2.1.1-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.2.2-r0

2.2.3-r0

2.2.3-r1

2.2.4-r0

2.2.5-r0

2.2.6-r0

2.2.7-r0

2.2.7-r1

2.2.8-r0

2.2.9-r0

2.2.9-r1

2.2.10-r0

2.2.10-r1

2.3.0-r0

2.4.1-r0

2.4.2-r0

2.4.3-r0

2.4.4-r0

2.4.5-r0

2.4.6-r0

2.4.7-r0

2.4.8-r0

2.4.8-r1

Alpine:v3.21 / expat

Package

Name: expat
Purl: pkg:apk/alpine/expat?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.9-r0

Affected versions

2.*

2.0.1-r0

2.0.1-r1

2.0.1-r2

2.0.1-r3

2.0.1-r4

2.0.1-r5

2.0.1-r6

2.1.0-r0

2.1.0-r1

2.1.0-r2

2.1.1-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.2.2-r0

2.2.3-r0

2.2.3-r1

2.2.4-r0

2.2.5-r0

2.2.6-r0

2.2.7-r0

2.2.7-r1

2.2.8-r0

2.2.9-r0

2.2.9-r1

2.2.10-r0

2.2.10-r1

2.3.0-r0

2.4.1-r0

2.4.2-r0

2.4.3-r0

2.4.4-r0

2.4.5-r0

2.4.6-r0

2.4.7-r0

2.4.8-r0

2.4.8-r1

Alpine:v3.22 / expat

Package

Name: expat
Purl: pkg:apk/alpine/expat?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.9-r0

Affected versions

2.*

2.0.1-r0

2.0.1-r1

2.0.1-r2

2.0.1-r3

2.0.1-r4

2.0.1-r5

2.0.1-r6

2.1.0-r0

2.1.0-r1

2.1.0-r2

2.1.1-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.2.2-r0

2.2.3-r0

2.2.3-r1

2.2.4-r0

2.2.5-r0

2.2.6-r0

2.2.7-r0

2.2.7-r1

2.2.8-r0

2.2.9-r0

2.2.9-r1

2.2.10-r0

2.2.10-r1

2.3.0-r0

2.4.1-r0

2.4.2-r0

2.4.3-r0

2.4.4-r0

2.4.5-r0

2.4.6-r0

2.4.7-r0

2.4.8-r0

2.4.8-r1

Debian:11 / expat

Package

Name: expat
Purl: pkg:deb/debian/expat?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.10-2+deb11u4

Affected versions

2.*

2.2.10-2

2.2.10-2+deb11u1

2.2.10-2+deb11u2

2.2.10-2+deb11u3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / expat

Package

Name: expat
Purl: pkg:deb/debian/expat?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.8-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / expat

Package

Name: expat
Purl: pkg:deb/debian/expat?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.8-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:11 / libxmltok

Package

Name: libxmltok
Purl: pkg:deb/debian/libxmltok?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.2-4

1.2-4.1~exp1

1.2-4.1

1.2-4.2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / libxmltok

Package

Name: libxmltok
Purl: pkg:deb/debian/libxmltok?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.2-4

1.2-4.1~exp1

1.2-4.1

1.2-4.2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/libexpat/libexpat

Affected ranges

Type: GIT
Repo: https://github.com/libexpat/libexpat
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

d77291a4824d78e697c5dc2b8024fd65ab31e209

Affected versions

Other

REC1_0

R_1_95_0

R_1_95_2

R_1_95_3

R_1_95_4

R_1_95_5

R_1_95_6

R_1_95_7

R_1_95_8

R_2_0_0

R_2_0_1

R_2_1_0

R_2_1_1

R_2_2_0

R_2_2_1

R_2_2_10

R_2_2_2

R_2_2_3

R_2_2_4

R_2_2_5

R_2_2_6

R_2_2_7

R_2_2_8

R_2_2_9

R_2_3_0

R_2_4_0

R_2_4_1

R_2_4_2

R_2_4_3

R_2_4_4

R_2_4_5

R_2_4_6

R_2_4_7

R_2_4_8

V1990307

V19981122

V19981231

V19990109

V19990425

V19990626

V19990709

V19990728

V19991013

V1_0

V1_1

V20000512

beta2

beta3

beta4

jclark-orig

libexpat-alpha-1

sourceforge_init

start