Vulnerability · Published Jan 6, 2022 · Assigned by mitre
CVE-2021-46143
High 8.1
In plain English
A high-severity integer overflow in the expat package (AlmaLinux). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 4.5% (higher than 91% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)4.5%top 8.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Public PoC
Official description
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | expat | 2.2.5-8.el8_6.2 | ALSA-2022:0951 |
| AlmaLinux:8 | expat-devel | 2.2.5-8.el8_6.2 | ALSA-2022:0951 |
| AlmaLinux:8 | xmlrpc-c | 1.51.0-8.el8 | ALSA-2022:7692 |
| AlmaLinux:8 | xmlrpc-c-c++ | 1.51.0-8.el8 | ALSA-2022:7692 |
| AlmaLinux:8 | xmlrpc-c-client | 1.51.0-8.el8 | ALSA-2022:7692 |
| AlmaLinux:8 | xmlrpc-c-client++ | 1.51.0-8.el8 | ALSA-2022:7692 |
| AlmaLinux:8 | xmlrpc-c-devel | 1.51.0-8.el8 | ALSA-2022:7692 |
| Alpine:v3.20 | expat | 2.4.3-r0 | ALPINE-CVE-2021-46143 |
| Alpine:v3.21 | expat | 2.4.3-r0 | ALPINE-CVE-2021-46143 |
| Alpine:v3.22 | expat | 2.4.3-r0 | ALPINE-CVE-2021-46143 |
| Alpine:v3.23 | expat | 2.4.3-r0 | ALPINE-CVE-2021-46143 |
| Alpine:v3.24 | expat | 2.4.3-r0 | ALPINE-CVE-2021-46143 |
| Debian:12 | expat | 2.4.3-1 | DEBIAN-CVE-2021-46143 |
| Debian:13 | expat | 2.4.3-1 | DEBIAN-CVE-2021-46143 |
| Debian:14 | expat | 2.4.3-1 | DEBIAN-CVE-2021-46143 |
| Debian:12 | libxmltok | no fix listed | DEBIAN-CVE-2021-46143 |
| Rocky Linux:8 | expat | 0:2.2.5-4.el8_5.3 | RLSA-2022:0951 |
| Rocky Linux:8 | xmlrpc-c | 0:1.51.0-8.el8 | RLSA-2022:7692 |
| Ubuntu:22.04:LTS | astropy | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | astropy | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | astropy | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | astropy | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | astropy | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | cadaver | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | cadaver | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | cadaver | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | cadaver | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | cadaver | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | coda | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | coda | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | coda | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | coda | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | coda | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | emboss | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | emboss | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | emboss | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | emboss | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | emboss | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | expat | 2.4.3-1 | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | firefox | 1:1snap1-0ubuntu1 | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | harp | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | harp | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | harp | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | harp | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | harp | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | ibm-3270 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | ibm-3270 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | ibm-3270 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | ibm-3270 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | ibm-3270 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | insighttoolkit5 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | insighttoolkit5 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | insighttoolkit5 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | insighttoolkit5 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | insighttoolkit5 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | libsynthesis | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | libsynthesis | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | libsynthesis | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | libsynthesis | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | libsynthesis | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | mame | 0.277+dfsg.1-4ubuntu0.1 | USN-7913-1 |
| Ubuntu:25.10 | mame | 0.277+dfsg.1-4ubuntu0.1 | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | mame | 0.281+dfsg1-1build1 | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | matanza | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | matanza | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | matanza | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | matanza | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | matanza | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | opencollada | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | opencollada | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | paraview | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | paraview | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | paraview | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | paraview | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | paraview | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | poco | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | poco | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | poco | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | poco | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | poco | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | qtwebengine-opensource-src | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | qtwebengine-opensource-src | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | sitecopy | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | sitecopy | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | sitecopy | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | sitecopy | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | swish-e | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | swish-e | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | tdom | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | tdom | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | tdom | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | tdom | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | tdom | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | tla | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | tla | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | tla | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | visp | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | visp | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | visp | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | visp | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | visp | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | wbxml2 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | wbxml2 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | wbxml2 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | wbxml2 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | wbxml2 | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | xmlrpc-c | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | xmlrpc-c | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | xmlrpc-c | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:22.04:LTS | xsd | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:24.04:LTS | xsd | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:25.10 | xsd | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.04:LTS | xsd | no fix listed | UBUNTU-CVE-2021-46143 |
| Ubuntu:26.10 | xsd | no fix listed | UBUNTU-CVE-2021-46143 |
Affected products (as reported)
Weakness: CWE-190 · Vector: CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
References
- https://github.com/libexpat/libexpat/issues/532 x_refsource_MISC
- https://github.com/libexpat/libexpat/pull/538 x_refsource_MISC
- [oss-security] 20220117 Expat 2.4.3 released, includes 8 security fixes mailing-list, x_refsource_MLIST
- https://security.netapp.com/advisory/ntap-20220121-0006/ x_refsource_CONFIRM
- https://www.tenable.com/security/tns-2022-05 x_refsource_CONFIRM
- DSA-5073 vendor-advisory, x_refsource_DEBIAN
- https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf x_refsource_CONFIRM
- GLSA-202209-24 vendor-advisory, x_refsource_GENTOO
- https://cert-portal.siemens.com/productcert/html/ssa-484086.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html