Log in Start free

Vulnerability · Published Feb 16, 2022 · Assigned by mitre

CVE-2022-25236

Critical 9.8

In plain English

A critical-severity security flaw in the expat package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 35.3% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)35.3%top 1.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8expat2.2.5-8.el8_6.2ALSA-2022:0951
AlmaLinux:8expat-devel2.2.5-8.el8_6.2ALSA-2022:0951
AlmaLinux:8firefox91.7.0-3.el8_5.almaALSA-2022:0818
AlmaLinux:8mingw32-expat2.4.8-1.el8ALSA-2022:7811
AlmaLinux:8mingw64-expat2.4.8-1.el8ALSA-2022:7811
AlmaLinux:8thunderbird91.7.0-2.el8_5.almaALSA-2022:0845
AlmaLinux:8thunderbird91.7.0-2.el8_5.alma.plusALSA-2022:0845
Alpine:v3.20expat2.4.5-r0ALPINE-CVE-2022-25236
Alpine:v3.21expat2.4.5-r0ALPINE-CVE-2022-25236
Alpine:v3.22expat2.4.5-r0ALPINE-CVE-2022-25236
Alpine:v3.23expat2.4.5-r0ALPINE-CVE-2022-25236
Alpine:v3.24expat2.4.5-r0ALPINE-CVE-2022-25236
Debian:12expat2.4.5-1DEBIAN-CVE-2022-25236
Debian:13expat2.4.5-1DEBIAN-CVE-2022-25236
Debian:14expat2.4.5-1DEBIAN-CVE-2022-25236
Debian:12libxmltokno fix listedDEBIAN-CVE-2022-25236
Rocky Linux:8expat0:2.2.5-4.el8_5.3RLSA-2022:0951
Rocky Linux:8firefox0:91.7.0-3.el8_5RLSA-2022:0818
Rocky Linux:8thunderbird0:91.7.0-2.el8_5RLSA-2022:0845
Ubuntu:22.04:LTSfirefox1:1snap1-0ubuntu1UBUNTU-CVE-2022-25236
Ubuntu:24.04:LTSlibxmltok1.2-4.1ubuntu1UBUNTU-CVE-2022-25236
Ubuntu:22.04:LTSmatanzano fix listedUBUNTU-CVE-2022-25236
Ubuntu:24.04:LTSmatanzano fix listedUBUNTU-CVE-2022-25236
Ubuntu:25.10matanzano fix listedUBUNTU-CVE-2022-25236
Ubuntu:26.04:LTSmatanzano fix listedUBUNTU-CVE-2022-25236
Ubuntu:26.10matanzano fix listedUBUNTU-CVE-2022-25236
Ubuntu:25.10swish-eno fix listedUBUNTU-CVE-2022-25236
Ubuntu:26.10swish-eno fix listedUBUNTU-CVE-2022-25236
Ubuntu:26.10tdomno fix listedUBUNTU-CVE-2022-25236
Ubuntu:22.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-25236
Ubuntu:24.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-25236
Ubuntu:25.10thunderbirdno fix listedUBUNTU-CVE-2022-25236
Ubuntu:26.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-25236
Ubuntu:26.10thunderbirdno fix listedUBUNTU-CVE-2022-25236

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-668 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References