Log in Start free

Vulnerability · Published Jan 24, 2022 · Assigned by mitre

CVE-2022-23852

Critical 9.8

In plain English

A critical-severity integer overflow in the expat package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.1% (higher than 92% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)5.1%top 7.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8expat2.2.5-8.el8_6.2ALSA-2022:0951
AlmaLinux:8expat-devel2.2.5-8.el8_6.2ALSA-2022:0951
Alpine:v3.20expat2.4.4-r0ALPINE-CVE-2022-23852
Alpine:v3.21expat2.4.4-r0ALPINE-CVE-2022-23852
Alpine:v3.22expat2.4.4-r0ALPINE-CVE-2022-23852
Alpine:v3.23expat2.4.4-r0ALPINE-CVE-2022-23852
Alpine:v3.24expat2.4.4-r0ALPINE-CVE-2022-23852
Alpine:v3.20qt5-qtwebengine5.15.3_git20220121-r4ALPINE-CVE-2022-23852
Alpine:v3.21qt5-qtwebengine5.15.3_git20220121-r4ALPINE-CVE-2022-23852
Alpine:v3.22qt5-qtwebengine5.15.3_git20220121-r4ALPINE-CVE-2022-23852
Alpine:v3.23qt5-qtwebengine5.15.3_git20220121-r4ALPINE-CVE-2022-23852
Debian:12expat2.4.3-2DEBIAN-CVE-2022-23852
Debian:13expat2.4.3-2DEBIAN-CVE-2022-23852
Debian:14expat2.4.3-2DEBIAN-CVE-2022-23852
Debian:12libxmltokno fix listedDEBIAN-CVE-2022-23852
Rocky Linux:8expat0:2.2.5-4.el8_5.3RLSA-2022:0951
Ubuntu:22.04:LTScadaverno fix listedUBUNTU-CVE-2022-23852
Ubuntu:24.04:LTScadaverno fix listedUBUNTU-CVE-2022-23852
Ubuntu:25.10cadaverno fix listedUBUNTU-CVE-2022-23852
Ubuntu:26.04:LTScadaverno fix listedUBUNTU-CVE-2022-23852
Ubuntu:26.10cadaverno fix listedUBUNTU-CVE-2022-23852
Ubuntu:22.04:LTSexpat2.4.3-2UBUNTU-CVE-2022-23852
Ubuntu:22.04:LTSfirefox1:1snap1-0ubuntu1UBUNTU-CVE-2022-23852
Ubuntu:22.04:LTSmatanzano fix listedUBUNTU-CVE-2022-23852
Ubuntu:24.04:LTSmatanzano fix listedUBUNTU-CVE-2022-23852
Ubuntu:25.10matanzano fix listedUBUNTU-CVE-2022-23852
Ubuntu:26.04:LTSmatanzano fix listedUBUNTU-CVE-2022-23852
Ubuntu:26.10matanzano fix listedUBUNTU-CVE-2022-23852
Ubuntu:25.10swish-eno fix listedUBUNTU-CVE-2022-23852
Ubuntu:26.10swish-eno fix listedUBUNTU-CVE-2022-23852
Ubuntu:22.04:LTStdomno fix listedUBUNTU-CVE-2022-23852
Ubuntu:24.04:LTStdomno fix listedUBUNTU-CVE-2022-23852
Ubuntu:25.10tdomno fix listedUBUNTU-CVE-2022-23852
Ubuntu:26.04:LTStdomno fix listedUBUNTU-CVE-2022-23852
Ubuntu:26.10tdomno fix listedUBUNTU-CVE-2022-23852
Ubuntu:22.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-23852
Ubuntu:24.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-23852
Ubuntu:25.10thunderbirdno fix listedUBUNTU-CVE-2022-23852
Ubuntu:26.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-23852
Ubuntu:26.10thunderbirdno fix listedUBUNTU-CVE-2022-23852
Ubuntu:22.04:LTSwbxml2no fix listedUBUNTU-CVE-2022-23852
Ubuntu:24.04:LTSwbxml2no fix listedUBUNTU-CVE-2022-23852
Ubuntu:25.10wbxml2no fix listedUBUNTU-CVE-2022-23852
Ubuntu:26.04:LTSwbxml2no fix listedUBUNTU-CVE-2022-23852
Ubuntu:26.10wbxml2no fix listedUBUNTU-CVE-2022-23852
Ubuntu:25.10xmlrpc-cno fix listedUBUNTU-CVE-2022-23852
Ubuntu:26.04:LTSxmlrpc-cno fix listedUBUNTU-CVE-2022-23852
Ubuntu:26.10xmlrpc-cno fix listedUBUNTU-CVE-2022-23852

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References