Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-23852
9.8
CRITICALCVSS v3
Published
January 24, 2022
CVSS v2
7.5 HIGH
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
libexpat/libexpat
GitHub:herb: Fast streaming XML parser written in C99 with >90% test coverage; moved from SourceForge to GitHub
GitHub:herb: Fast streaming XML parser written in C99 with >90% test coverage; moved from SourceForge to GitHub< 2.4.4NVD
tenableofficial/nessus
Docker HubRepository replaced by https://hub.docker.com/r/tenable/nessus. Will be removed on/after 2024-02-12
Docker HubRepository replaced by https://hub.docker.com/r/tenable/nessus. Will be removed on/after 2024-02-12< 8.15.3, >= 10.0.0, < 10.1.1NVD