Log in Start free

Vulnerability · Published Feb 18, 2022 · Assigned by mitre

CVE-2022-25315

Critical 9.8

In plain English

A critical-severity integer overflow in the expat package (AlmaLinux). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 4.8% (higher than 92% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)4.8%top 8.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Public PoC

Official description

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8expat2.2.5-8.el8_6.2ALSA-2022:0951
AlmaLinux:8expat-devel2.2.5-8.el8_6.2ALSA-2022:0951
AlmaLinux:8firefox91.7.0-3.el8_5.almaALSA-2022:0818
AlmaLinux:8mingw32-expat2.4.8-1.el8ALSA-2022:7811
AlmaLinux:8mingw64-expat2.4.8-1.el8ALSA-2022:7811
AlmaLinux:8thunderbird91.7.0-2.el8_5.almaALSA-2022:0845
AlmaLinux:8thunderbird91.7.0-2.el8_5.alma.plusALSA-2022:0845
Alpine:v3.20expat2.4.5-r0ALPINE-CVE-2022-25315
Alpine:v3.21expat2.4.5-r0ALPINE-CVE-2022-25315
Alpine:v3.22expat2.4.5-r0ALPINE-CVE-2022-25315
Alpine:v3.23expat2.4.5-r0ALPINE-CVE-2022-25315
Alpine:v3.24expat2.4.5-r0ALPINE-CVE-2022-25315
Debian:12expat2.4.5-1DEBIAN-CVE-2022-25315
Debian:13expat2.4.5-1DEBIAN-CVE-2022-25315
Debian:14expat2.4.5-1DEBIAN-CVE-2022-25315
Debian:12libxmltokno fix listedDEBIAN-CVE-2022-25315
Rocky Linux:8expat0:2.2.5-4.el8_5.3RLSA-2022:0951
Rocky Linux:8firefox0:91.7.0-3.el8_5RLSA-2022:0818
Rocky Linux:8thunderbird0:91.7.0-2.el8_5RLSA-2022:0845
Ubuntu:22.04:LTScadaverno fix listedUBUNTU-CVE-2022-25315
Ubuntu:24.04:LTScadaverno fix listedUBUNTU-CVE-2022-25315
Ubuntu:25.10cadaverno fix listedUBUNTU-CVE-2022-25315
Ubuntu:26.04:LTScadaverno fix listedUBUNTU-CVE-2022-25315
Ubuntu:26.10cadaverno fix listedUBUNTU-CVE-2022-25315
Ubuntu:22.04:LTSfirefox1:1snap1-0ubuntu1UBUNTU-CVE-2022-25315
Ubuntu:22.04:LTSmatanzano fix listedUBUNTU-CVE-2022-25315
Ubuntu:24.04:LTSmatanzano fix listedUBUNTU-CVE-2022-25315
Ubuntu:25.10matanzano fix listedUBUNTU-CVE-2022-25315
Ubuntu:26.04:LTSmatanzano fix listedUBUNTU-CVE-2022-25315
Ubuntu:26.10matanzano fix listedUBUNTU-CVE-2022-25315
Ubuntu:25.10swish-eno fix listedUBUNTU-CVE-2022-25315
Ubuntu:26.10swish-eno fix listedUBUNTU-CVE-2022-25315
Ubuntu:22.04:LTStdomno fix listedUBUNTU-CVE-2022-25315
Ubuntu:24.04:LTStdomno fix listedUBUNTU-CVE-2022-25315
Ubuntu:25.10tdomno fix listedUBUNTU-CVE-2022-25315
Ubuntu:26.04:LTStdomno fix listedUBUNTU-CVE-2022-25315
Ubuntu:26.10tdomno fix listedUBUNTU-CVE-2022-25315
Ubuntu:22.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-25315
Ubuntu:24.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-25315
Ubuntu:25.10thunderbirdno fix listedUBUNTU-CVE-2022-25315
Ubuntu:26.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-25315
Ubuntu:26.10thunderbirdno fix listedUBUNTU-CVE-2022-25315
Ubuntu:22.04:LTSwbxml2no fix listedUBUNTU-CVE-2022-25315
Ubuntu:24.04:LTSwbxml2no fix listedUBUNTU-CVE-2022-25315
Ubuntu:25.10wbxml2no fix listedUBUNTU-CVE-2022-25315
Ubuntu:26.04:LTSwbxml2no fix listedUBUNTU-CVE-2022-25315
Ubuntu:26.10wbxml2no fix listedUBUNTU-CVE-2022-25315
Ubuntu:25.10xmlrpc-cno fix listedUBUNTU-CVE-2022-25315
Ubuntu:26.04:LTSxmlrpc-cno fix listedUBUNTU-CVE-2022-25315
Ubuntu:26.10xmlrpc-cno fix listedUBUNTU-CVE-2022-25315

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References