Bug 2048356 (CVE-2022-23990)
| Summary: | CVE-2022-23990 expat: integer overflow in the doProlog function | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Avinash Hanwate <ahanwate> |
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
| Status: | CLOSED ERRATA | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | csutherl, erack, erik-fedora, fhrdina, gzaronik, jclere, jhorak, jorton, jwon, kirandarbha, manisandro, mturk, pjindal, rcritten, rh-spice-bugs, rjones, saroy, stransky, szappis, tkorbar, tpopela |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | expat 2.4.4 | Doc Type: | If docs needed, set a value |
| Doc Text: |
A flaw was found in expat. The vulnerability occurs due to large content in element type declarations when there is an element declaration handler present which leads to an integer overflow. This flaw allows an attacker to inject an unsigned integer, leading to a crash or a denial of service.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-12-03 21:03:47 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2050214, 2050215, 2050503, 2050504, 2138776, 2138777, 2138778, 2138779, 2138780, 2138781, 2138782, 2138783, 2138784, 2138785 | ||
| Bug Blocks: | 2048357 | ||
|
Description
Avinash Hanwate
2022-01-31 04:24:16 UTC
Created expat tracking bugs for this issue: Affects: fedora-all [bug 2050215] Created mingw-expat tracking bugs for this issue: Affects: fedora-all [bug 2050214] I have this vulnerability shown by Twistlock scans - but its on ubi-minimal 8.6.x. When I check on the Red Hat Advisory here- https://access.redhat.com/security/cve/CVE-2022-23990, it doesn't mention about RHEL v8.x; does that mean, this RHEL v8.x is NOT AFFECTED by this vulnerability(CVE-2022-23990) ?? This issue has been addressed in the following products: Red Hat JBoss Core Services Via RHSA-2022:7144 https://access.redhat.com/errata/RHSA-2022:7144 This issue has been addressed in the following products: JBoss Core Services on RHEL 7 JBoss Core Services for RHEL 8 Via RHSA-2022:7143 https://access.redhat.com/errata/RHSA-2022:7143 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2022:7811 https://access.redhat.com/errata/RHSA-2022:7811 This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2022-23990 |