https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:48:06 +0000 https://vulnerability.circl.lu/vuln/cve-2022-43680 <p>In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.</p> <p>In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.</p> https://vulnerability.circl.lu/vuln/cve-2022-43680 https://vulnerability.circl.lu/vuln/usn-5638-2 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: expat, Ubuntu:20.04:LTS: expat, Ubuntu:22.04:LTS: expat</p> <p>USN-5638-1 fixed a vulnerability in Expat. This update provides the corresponding updates for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.</p> <p>It was discovered that Expat incorrectly handled memory in out-of-memory situations. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2022-43680)</p> <p>Original advisory details:</p> <p>Rhodri James discovered that Expat incorrectly handled memory when processing certain malformed XML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: expat, Ubuntu:20.04:LTS: expat, Ubuntu:22.04:LTS: expat</p> <p>USN-5638-1 fixed a vulnerability in Expat. This update provides the corresponding updates for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.</p> <p>It was discovered that Expat incorrectly handled memory in out-of-memory situations. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2022-43680)</p> <p>Original advisory details:</p> <p>Rhodri James discovered that Expat incorrectly handled memory when processing certain malformed XML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code.</p> https://vulnerability.circl.lu/vuln/usn-5638-2