Log in Start free

Vulnerability · Published Feb 16, 2022 · Assigned by mitre

CVE-2022-25235

Critical 9.8

In plain English

A critical-severity security flaw in the expat package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.0% (higher than 92% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)5.0%top 7.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8expat2.2.5-8.el8_6.2ALSA-2022:0951
AlmaLinux:8expat-devel2.2.5-8.el8_6.2ALSA-2022:0951
AlmaLinux:8firefox91.7.0-3.el8_5.almaALSA-2022:0818
AlmaLinux:8mingw32-expat2.4.8-1.el8ALSA-2022:7811
AlmaLinux:8mingw64-expat2.4.8-1.el8ALSA-2022:7811
AlmaLinux:8thunderbird91.7.0-2.el8_5.alma.plusALSA-2022:0845
AlmaLinux:8thunderbird91.7.0-2.el8_5.almaALSA-2022:0845
AlmaLinux:8xmlrpc-c-c++1.51.0-5.el8_5.1ALSA-2022:1643
AlmaLinux:8xmlrpc-c-client++1.51.0-5.el8_5.1ALSA-2022:1643
AlmaLinux:8xmlrpc-c-devel1.51.0-5.el8_5.1ALSA-2022:1643
Alpine:v3.20expat2.4.5-r0ALPINE-CVE-2022-25235
Alpine:v3.21expat2.4.5-r0ALPINE-CVE-2022-25235
Alpine:v3.22expat2.4.5-r0ALPINE-CVE-2022-25235
Alpine:v3.23expat2.4.5-r0ALPINE-CVE-2022-25235
Alpine:v3.24expat2.4.5-r0ALPINE-CVE-2022-25235
Debian:12expat2.4.5-1DEBIAN-CVE-2022-25235
Debian:13expat2.4.5-1DEBIAN-CVE-2022-25235
Debian:14expat2.4.5-1DEBIAN-CVE-2022-25235
Debian:12libxmltokno fix listedDEBIAN-CVE-2022-25235
Rocky Linux:8expat0:2.2.5-4.el8_5.3RLSA-2022:0951
Rocky Linux:8firefox0:91.7.0-3.el8_5RLSA-2022:0818
Rocky Linux:8thunderbird0:91.7.0-2.el8_5RLSA-2022:0845
Rocky Linux:8xmlrpc-c0:1.51.0-5.el8_5.1RLSA-2022:1643
Ubuntu:22.04:LTSfirefox1:1snap1-0ubuntu1UBUNTU-CVE-2022-25235
Ubuntu:24.04:LTSlibxmltok1.2-4.1ubuntu1UBUNTU-CVE-2022-25235
Ubuntu:22.04:LTSmatanzano fix listedUBUNTU-CVE-2022-25235
Ubuntu:24.04:LTSmatanzano fix listedUBUNTU-CVE-2022-25235
Ubuntu:25.10matanzano fix listedUBUNTU-CVE-2022-25235
Ubuntu:26.04:LTSmatanzano fix listedUBUNTU-CVE-2022-25235
Ubuntu:26.10matanzano fix listedUBUNTU-CVE-2022-25235
Ubuntu:25.10swish-eno fix listedUBUNTU-CVE-2022-25235
Ubuntu:26.10swish-eno fix listedUBUNTU-CVE-2022-25235
Ubuntu:22.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-25235
Ubuntu:24.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-25235
Ubuntu:25.10thunderbirdno fix listedUBUNTU-CVE-2022-25235
Ubuntu:26.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-25235
Ubuntu:26.10thunderbirdno fix listedUBUNTU-CVE-2022-25235

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-116 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References