CVE-2022-25235
Published: 15 February 2022
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
Notes
Author | Note |
---|---|
sbeattie | paraview uses system expat xotcl uses system expat poco uses system expat gdcm uses system expat audacity uses system expat simgear uses system expat coin3 uses system expat as of 4.0.0~CMake~6f54f1602475+ds1-1 sitecopy uses system expat since 1:0.16.0-1 (dapper!) |
Priority
Status
Package | Release | Status |
---|---|---|
firefox Launchpad, Ubuntu, Debian |
kinetic |
Released
(1:1snap1-0ubuntu1)
|
focal |
Ignored
(bundled deps handled by upstream in new versions)
|
|
impish |
Ignored
(end of life)
|
|
lunar |
Released
(1:1snap1-0ubuntu1)
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
jammy |
Released
(1:1snap1-0ubuntu1)
|
|
bionic |
Ignored
(end of standard support, was needed)
|
|
xenial |
Ignored
(end of standard support, was needed)
|
|
mantic |
Released
(1:1snap1-0ubuntu1)
|
|
smart Launchpad, Ubuntu, Debian |
kinetic |
Does not exist
|
bionic |
Not vulnerable
(code-not-compiled)
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(code-not-compiled)
|
|
jammy |
Does not exist
|
|
mantic |
Does not exist
|
|
vtk Launchpad, Ubuntu, Debian |
kinetic |
Does not exist
|
xenial |
Needs triage
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Needs triage
|
|
upstream |
Needs triage
|
|
jammy |
Does not exist
|
|
mantic |
Does not exist
|
|
thunderbird Launchpad, Ubuntu, Debian |
xenial |
Ignored
(end of standard support, was needed)
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
focal |
Ignored
(bundled deps handled by upstream in new versions)
|
|
lunar |
Ignored
(bundled deps handled by upstream in new versions)
|
|
bionic |
Ignored
(end of standard support, was needed)
|
|
impish |
Ignored
(end of life)
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
jammy |
Ignored
(bundled deps handled by upstream in new versions)
|
|
mantic |
Ignored
(bundled deps handled by upstream in new versions)
|
|
apache2 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(code-not-compiled)
|
focal |
Not vulnerable
(code-not-compiled)
|
|
impish |
Not vulnerable
(code-not-compiled)
|
|
trusty |
Not vulnerable
(code-not-compiled)
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(code-not-compiled)
|
|
kinetic |
Not vulnerable
(code-not-compiled)
|
|
lunar |
Not vulnerable
(code-not-compiled)
|
|
jammy |
Not vulnerable
(code-not-compiled)
|
|
mantic |
Not vulnerable
(code-not-compiled)
|
|
apr-util Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(code-not-compiled)
|
focal |
Not vulnerable
(code-not-compiled)
|
|
impish |
Not vulnerable
(code-not-compiled)
|
|
trusty |
Not vulnerable
(code-not-compiled)
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(code-not-compiled)
|
|
kinetic |
Not vulnerable
(code-not-compiled)
|
|
lunar |
Not vulnerable
(code-not-compiled)
|
|
jammy |
Not vulnerable
(code-not-compiled)
|
|
mantic |
Not vulnerable
(code-not-compiled)
|
|
cmake Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(code-not-compiled)
|
focal |
Not vulnerable
(code-not-compiled)
|
|
trusty |
Does not exist
|
|
xenial |
Not vulnerable
(code-not-compiled)
|
|
impish |
Not vulnerable
(code-not-compiled)
|
|
upstream |
Needs triage
|
|
kinetic |
Not vulnerable
(code-not-compiled)
|
|
lunar |
Not vulnerable
(code-not-compiled)
|
|
jammy |
Not vulnerable
(code-not-compiled)
|
|
mantic |
Not vulnerable
(code-not-compiled)
|
|
ayttm Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
kinetic |
Does not exist
|
|
xenial |
Needs triage
|
|
jammy |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
cableswig Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
trusty |
Does not exist
|
|
impish |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Needs triage
|
|
jammy |
Does not exist
|
|
mantic |
Does not exist
|
|
cadaver Launchpad, Ubuntu, Debian |
bionic |
Needs triage
|
focal |
Needs triage
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
impish |
Ignored
(end of life)
|
|
lunar |
Needs triage
|
|
xenial |
Needs triage
|
|
jammy |
Needs triage
|
|
mantic |
Needs triage
|
|
expat Launchpad, Ubuntu, Debian |
bionic |
Released
(2.2.5-3ubuntu0.4)
|
focal |
Released
(2.2.9-1ubuntu0.2)
|
|
impish |
Released
(2.4.1-2ubuntu0.1)
|
|
trusty |
Released
(2.1.0-4ubuntu1.4+esm4)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
upstream |
Released
(2.4.5)
|
|
kinetic |
Released
(2.4.5-2)
|
|
lunar |
Released
(2.4.5-2)
|
|
xenial |
Released
(2.1.0-7ubuntu0.16.04.5+esm2)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
jammy |
Released
(2.4.5-2)
|
|
mantic |
Released
(2.4.5-2)
|
|
Patches: upstream: https://github.com/libexpat/libexpat/commit/306b72134f157bbfd1637b20a22cabf4acfa136a |
||
swish-e Launchpad, Ubuntu, Debian |
xenial |
Needs triage
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
bionic |
Needs triage
|
|
focal |
Needs triage
|
|
impish |
Ignored
(end of life)
|
|
lunar |
Needs triage
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
jammy |
Needs triage
|
|
mantic |
Needs triage
|
|
vnc4 Launchpad, Ubuntu, Debian |
xenial |
Needs triage
|
bionic |
Needs triage
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Needs triage
|
|
upstream |
Needs triage
|
|
jammy |
Does not exist
|
|
mantic |
Does not exist
|
|
wbxml2 Launchpad, Ubuntu, Debian |
xenial |
Needs triage
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
bionic |
Needs triage
|
|
focal |
Needs triage
|
|
impish |
Ignored
(end of life)
|
|
lunar |
Needs triage
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
jammy |
Needs triage
|
|
mantic |
Needs triage
|
|
xmlrpc-c Launchpad, Ubuntu, Debian |
xenial |
Needed
|
kinetic |
Ignored
(end of life, was needed)
|
|
bionic |
Needed
|
|
focal |
Needed
|
|
impish |
Ignored
(end of life)
|
|
lunar |
Needed
|
|
trusty |
Needed
|
|
upstream |
Needs triage
|
|
jammy |
Needed
|
|
mantic |
Needed
|
|
libxmltok Launchpad, Ubuntu, Debian |
xenial |
Released
(1.2-3ubuntu0.16.04.1~esm2)
Available with Ubuntu Pro |
kinetic |
Ignored
(end of life, was needed)
|
|
bionic |
Released
(1.2-4ubuntu0.18.04.1~esm1)
Available with Ubuntu Pro |
|
focal |
Released
(1.2-4ubuntu0.20.04.1~esm1)
Available with Ubuntu Pro |
|
jammy |
Released
(1.2-4ubuntu0.22.04.1~esm1)
Available with Ubuntu Pro |
|
lunar |
Needed
|
|
trusty |
Ignored
(end of standard support)
|
|
hirsute |
Ignored
(end of life)
|
|
impish |
Ignored
(end of life)
|
|
upstream |
Needs triage
|
|
mantic |
Needed
|
|
matanza Launchpad, Ubuntu, Debian |
xenial |
Needs triage
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
bionic |
Needs triage
|
|
focal |
Needs triage
|
|
impish |
Ignored
(end of life)
|
|
lunar |
Needs triage
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
jammy |
Needs triage
|
|
mantic |
Needs triage
|
|
tdom Launchpad, Ubuntu, Debian |
xenial |
Needs triage
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
bionic |
Needs triage
|
|
focal |
Needs triage
|
|
impish |
Ignored
(end of life)
|
|
lunar |
Needs triage
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
jammy |
Needs triage
|
|
mantic |
Needs triage
|
|
coin3 Launchpad, Ubuntu, Debian |
bionic |
Needs triage
|
focal |
Not vulnerable
(uses system expat)
|
|
impish |
Not vulnerable
(uses system expat)
|
|
kinetic |
Not vulnerable
(uses system expat)
|
|
lunar |
Not vulnerable
(uses system expat)
|
|
trusty |
Needs triage
|
|
upstream |
Needs triage
|
|
xenial |
Needs triage
|
|
jammy |
Not vulnerable
(uses system expat)
|
|
mantic |
Not vulnerable
(uses system expat)
|
|
gdcm Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(uses system expat)
|
focal |
Not vulnerable
(uses system expat)
|
|
impish |
Not vulnerable
(uses system expat)
|
|
kinetic |
Not vulnerable
(uses system expat)
|
|
lunar |
Not vulnerable
(uses system expat)
|
|
trusty |
Not vulnerable
(uses system expat)
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(uses system expat)
|
|
jammy |
Not vulnerable
(uses system expat)
|
|
mantic |
Not vulnerable
(uses system expat)
|
|
ghostscript Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(code-not-compiled)
|
focal |
Not vulnerable
(code-not-compiled)
|
|
impish |
Not vulnerable
(code-not-compiled)
|
|
kinetic |
Not vulnerable
(code-not-compiled)
|
|
lunar |
Not vulnerable
(code-not-compiled)
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(code-not-compiled)
|
|
jammy |
Not vulnerable
(code-not-compiled)
|
|
mantic |
Not vulnerable
(code-not-compiled)
|
|
insighttoolkit4 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(uses system expat)
|
focal |
Not vulnerable
(uses system expat)
|
|
kinetic |
Not vulnerable
(uses system expat)
|
|
lunar |
Not vulnerable
(uses system expat)
|
|
impish |
Ignored
(end of life)
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Needs triage
|
|
jammy |
Not vulnerable
(uses system expat)
|
|
mantic |
Does not exist
|
|
insighttoolkit Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Needs triage
|
|
jammy |
Does not exist
|
|
mantic |
Does not exist
|
|
texlive-bin Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(code-not-compiled)
|
focal |
Not vulnerable
(code-not-compiled)
|
|
impish |
Not vulnerable
(code-not-compiled)
|
|
kinetic |
Not vulnerable
(code-not-compiled)
|
|
lunar |
Not vulnerable
(code-not-compiled)
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(code-not-compiled)
|
|
jammy |
Not vulnerable
(code-not-compiled)
|
|
mantic |
Not vulnerable
(code-not-compiled)
|
Severity score breakdown
Parameter | Value |
---|---|
Base score | 9.8 |
Attack vector | Network |
Attack complexity | Low |
Privileges required | None |
User interaction | None |
Scope | Unchanged |
Confidentiality | High |
Integrity impact | High |
Availability impact | High |
Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25235
- https://github.com/libexpat/libexpat/pull/562
- https://github.com/libexpat/libexpat/pull/562/commits/367ae600b48d74261bbc339b17e9318424049791 (fix)
- https://github.com/libexpat/libexpat/pull/562/commits/97cfdc3fa7dca759880d81e371901f4620279106 (tests)
- https://ubuntu.com/security/notices/USN-5288-1
- https://ubuntu.com/security/notices/USN-5455-1
- NVD
- Launchpad
- Debian