Log in Start free

Vulnerability · Published Sep 14, 2022 · Assigned by mitre

CVE-2022-40674

High 8.1

In plain English

A high-severity use-after-free in the expat package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 83% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.1High
Exploit odds (30 days)2.2%top 17.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8expat2.2.5-8.el8_6.3ALSA-2022:6878
AlmaLinux:9expat2.2.10-12.el9_0.3ALSA-2022:6838
AlmaLinux:8expat-devel2.2.5-8.el8_6.3ALSA-2022:6878
AlmaLinux:9expat-devel2.2.10-12.el9_0.3ALSA-2022:6838
AlmaLinux:8firefox102.3.0-7.el8_6.almaALSA-2022:7024
AlmaLinux:9firefox102.3.0-7.el9_0.almaALSA-2022:7020
AlmaLinux:8mingw32-expat2.4.8-2.el8ALSA-2023:3068
AlmaLinux:8mingw64-expat2.4.8-2.el8ALSA-2023:3068
AlmaLinux:8thunderbird102.3.0-4.el8_6.almaALSA-2022:7023
AlmaLinux:9thunderbird102.3.0-4.el9_0.alma.plusALSA-2022:7026
Alpine:v3.20expat2.4.9-r0ALPINE-CVE-2022-40674
Alpine:v3.21expat2.4.9-r0ALPINE-CVE-2022-40674
Alpine:v3.22expat2.4.9-r0ALPINE-CVE-2022-40674
Alpine:v3.23expat2.4.9-r0ALPINE-CVE-2022-40674
Alpine:v3.24expat2.4.9-r0ALPINE-CVE-2022-40674
Debian:12expat2.4.8-2DEBIAN-CVE-2022-40674
Debian:13expat2.4.8-2DEBIAN-CVE-2022-40674
Debian:14expat2.4.8-2DEBIAN-CVE-2022-40674
Debian:12libxmltokno fix listedDEBIAN-CVE-2022-40674
Rocky Linux:8expat0:2.2.5-8.el8_6.3RLSA-2022:6878
Rocky Linux:9expat0:2.2.10-12.el9_0.3RLSA-2022:6838
Rocky Linux:8firefox0:102.3.0-7.el8_6RLSA-2022:7024
Rocky Linux:8mingw-expat0:2.4.8-2.el8RLSA-2023:3068
Rocky Linux:8thunderbird0:102.3.0-4.el8_6RLSA-2022:7023
Ubuntu:22.04:LTScadaverno fix listedUBUNTU-CVE-2022-40674
Ubuntu:24.04:LTScadaverno fix listedUBUNTU-CVE-2022-40674
Ubuntu:25.10cadaverno fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.04:LTScadaverno fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.10cadaverno fix listedUBUNTU-CVE-2022-40674
Ubuntu:22.04:LTScoin3no fix listedUBUNTU-CVE-2022-40674
Ubuntu:24.04:LTScoin3no fix listedUBUNTU-CVE-2022-40674
Ubuntu:25.10coin3no fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.04:LTScoin3no fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.10coin3no fix listedUBUNTU-CVE-2022-40674
Ubuntu:22.04:LTSexpat2.4.7-1ubuntu0.1USN-5638-2
Ubuntu:22.04:LTSexpat2.4.7-1ubuntu0.1UBUNTU-CVE-2022-40674
Ubuntu:22.04:LTSmatanzano fix listedUBUNTU-CVE-2022-40674
Ubuntu:24.04:LTSmatanzano fix listedUBUNTU-CVE-2022-40674
Ubuntu:25.10matanzano fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.04:LTSmatanzano fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.10matanzano fix listedUBUNTU-CVE-2022-40674
Ubuntu:25.10swish-eno fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.10swish-eno fix listedUBUNTU-CVE-2022-40674
Ubuntu:22.04:LTStdomno fix listedUBUNTU-CVE-2022-40674
Ubuntu:24.04:LTStdomno fix listedUBUNTU-CVE-2022-40674
Ubuntu:25.10tdomno fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.04:LTStdomno fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.10tdomno fix listedUBUNTU-CVE-2022-40674
Ubuntu:22.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-40674
Ubuntu:24.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-40674
Ubuntu:25.10thunderbirdno fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.04:LTSthunderbirdno fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.10thunderbirdno fix listedUBUNTU-CVE-2022-40674
Ubuntu:22.04:LTSwbxml2no fix listedUBUNTU-CVE-2022-40674
Ubuntu:24.04:LTSwbxml2no fix listedUBUNTU-CVE-2022-40674
Ubuntu:25.10wbxml2no fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.04:LTSwbxml2no fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.10wbxml2no fix listedUBUNTU-CVE-2022-40674
Ubuntu:25.10xmlrpc-cno fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.04:LTSxmlrpc-cno fix listedUBUNTU-CVE-2022-40674
Ubuntu:26.10xmlrpc-cno fix listedUBUNTU-CVE-2022-40674

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-416 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References