wid-sec-w-2022-0498
Vulnerability from csaf_certbund
Published
2022-01-23 23:00
Modified
2023-05-09 22:00
Summary
expat: Schwachstelle ermöglicht nicht spezifizierten Angriff

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Expat ist ein XML Parser, der in der Programmiersprache-C geschrieben ist.
Angriff
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in expat ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
Betroffene Betriebssysteme
- UNIX - Linux - Appliance



{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Expat ist ein XML Parser, der in der Programmiersprache-C geschrieben ist.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in expat ausnutzen, um einen nicht n\u00e4her spezifizierten Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Linux\n- Appliance",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-0498 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0498.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-0498 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0498"
      },
      {
        "category": "external",
        "summary": "Tenable Security Advisory TNS-2023-19 vom 2023-05-10",
        "url": "https://www.tenable.com/security/tns-2023-19"
      },
      {
        "category": "external",
        "summary": "Juniper Security Bulletin vom 2023-04-13",
        "url": "https://supportportal.juniper.net/s/article/2023-04-Security-Bulletin-Junos-OS-Multiple-vulnerabilities-in-expat-resolved?language=en_US"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:4834 vom 2022-05-31",
        "url": "https://access.redhat.com/errata/RHSA-2022:4834"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2022-01-23",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23852"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2022-01-23",
        "url": "https://github.com/libexpat/libexpat/pull/550"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-2904 vom 2022-01-30",
        "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00032.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:14884-1 vom 2022-02-09",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010199.html"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2022-067 vom 2022-05-16",
        "url": "https://downloads.avaya.com/css/P8/documents/101081824"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5073 vom 2022-02-12",
        "url": "https://lists.debian.org/debian-security-announce/2022/msg00040.html"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20220217-0001 vom 2022-02-17",
        "url": "https://security.netapp.com/advisory/ntap-20220217-0001/"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-028 vom 2022-02-17",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-028.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:0498-1 vom 2022-02-18",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010268.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:0495-1 vom 2022-02-18",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010253.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5288-1 vom 2022-02-21",
        "url": "https://ubuntu.com/security/notices/USN-5288-1"
      },
      {
        "category": "external",
        "summary": "Pulse Secure Security Advisory SA45038 vom 2022-02-22",
        "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/CVE-2022-23852-Expat-aka-libexpat-before-2-4-4-has-a-signed-integer-overflow-in-XML-GetBuffer-for-configurations-with-a-nonzero-XML-CONTEXT-BYTES"
      },
      {
        "category": "external",
        "summary": "OpenBSD 7.0 errata",
        "url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.0/common/015_expat.patch.sig"
      },
      {
        "category": "external",
        "summary": "Tenable Security Advisory",
        "url": "https://www.tenable.com/security/tns-2022-11"
      },
      {
        "category": "external",
        "summary": "Tenable Security Advisory",
        "url": "https://www.tenable.com/security/tns-2022-12"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1754 vom 2022-03-05",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1754.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1569 vom 2022-03-05",
        "url": "https://alas.aws.amazon.com/ALAS-2022-1569.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-2935 vom 2022-03-07",
        "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0951 vom 2022-03-16",
        "url": "https://access.redhat.com/errata/RHSA-2022:0951"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-0951 vom 2022-03-17",
        "url": "http://linux.oracle.com/errata/ELSA-2022-0951.html"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2022-031 vom 2022-03-17",
        "url": "https://downloads.avaya.com/css/P8/documents/101080937"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-1069 vom 2022-03-28",
        "url": "http://linux.oracle.com/errata/ELSA-2022-1069.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:1069 vom 2022-03-28",
        "url": "https://access.redhat.com/errata/RHSA-2022:1069"
      },
      {
        "category": "external",
        "summary": "Meinberg Security Advisory MBGSA-2022.01 vom 2022-04-05",
        "url": "https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2022-01-meinberg-lantime-firmware-v7-04-015-und-v6-24-030.htm"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:1476 vom 2022-04-21",
        "url": "https://access.redhat.com/errata/RHSA-2022:1476"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097787 vom 2022-04-28",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097787"
      },
      {
        "category": "external",
        "summary": "F5 Security Advisory K19473898 vom 2022-04-30",
        "url": "https://support.f5.com/csp/article/K19473898"
      },
      {
        "category": "external",
        "summary": "Unify Security Advisory Report",
        "url": "https://networks.unify.com/security/advisories/OBSO-2206-01.pdf"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:5483 vom 2022-07-01",
        "url": "https://access.redhat.com/errata/RHSA-2022:5483"
      },
      {
        "category": "external",
        "summary": "Autodesk Security Advisory ADSK-SA-2022-0017 vom 2022-08-02",
        "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0017"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202209-24 vom 2022-09-29",
        "url": "https://security.gentoo.org/glsa/202209-24"
      },
      {
        "category": "external",
        "summary": "Juniper Security Bulletin",
        "url": "https://supportportal.juniper.net/s/article/2022-10-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-22-2R1-release"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:7144 vom 2022-10-27",
        "url": "https://access.redhat.com/errata/RHSA-2022:7144"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:7143 vom 2022-10-27",
        "url": "https://access.redhat.com/errata/RHSA-2022:7143"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-232 vom 2022-12-09",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-232.html"
      }
    ],
    "source_lang": "en-US",
    "title": "expat: Schwachstelle erm\u00f6glicht nicht spezifizierten Angriff",
    "tracking": {
      "current_release_date": "2023-05-09T22:00:00.000+00:00",
      "generator": {
        "date": "2024-02-15T16:50:22.371+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2022-0498",
      "initial_release_date": "2022-01-23T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-01-23T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2022-01-30T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2022-02-09T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-02-13T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2022-02-17T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von NetApp und Amazon aufgenommen"
        },
        {
          "date": "2022-02-20T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-02-21T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2022-02-22T23:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Pulse Secure aufgenommen"
        },
        {
          "date": "2022-02-23T23:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2022-03-06T23:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2022-03-07T23:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2022-03-16T23:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-03-17T23:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-03-20T23:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von AVAYA aufgenommen"
        },
        {
          "date": "2022-03-28T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Oracle Linux und Red Hat aufgenommen"
        },
        {
          "date": "2022-04-04T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Meinberg aufgenommen"
        },
        {
          "date": "2022-04-21T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-04-27T22:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-05-01T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Informationen von F5 aufgenommen"
        },
        {
          "date": "2022-05-17T22:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von AVAYA aufgenommen"
        },
        {
          "date": "2022-05-26T22:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Tenable aufgenommen"
        },
        {
          "date": "2022-05-31T22:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-06-28T22:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Unify aufgenommen"
        },
        {
          "date": "2022-07-03T22:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-08-01T22:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Autodesk aufgenommen"
        },
        {
          "date": "2022-09-29T22:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Gentoo aufgenommen"
        },
        {
          "date": "2022-10-12T22:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2022-10-26T22:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-12-11T23:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2023-04-12T22:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von Juniper aufgenommen"
        },
        {
          "date": "2023-05-09T22:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von Tenable aufgenommen"
        }
      ],
      "status": "final",
      "version": "31"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Autodesk AutoCAD",
            "product": {
              "name": "Autodesk AutoCAD",
              "product_id": "950",
              "product_identification_helper": {
                "cpe": "cpe:/a:autodesk:autocad:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Autodesk"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Avaya Aura Application Enablement Services",
            "product": {
              "name": "Avaya Aura Application Enablement Services",
              "product_id": "T015516",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_application_enablement_services:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Communication Manager",
            "product": {
              "name": "Avaya Aura Communication Manager",
              "product_id": "T015126",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:communication_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Device Services",
            "product": {
              "name": "Avaya Aura Device Services",
              "product_id": "T015517",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_device_services:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Experience Portal",
            "product": {
              "name": "Avaya Aura Experience Portal",
              "product_id": "T015519",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_experience_portal:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Session Manager",
            "product": {
              "name": "Avaya Aura Session Manager",
              "product_id": "T015127",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:session_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura System Manager",
            "product": {
              "name": "Avaya Aura System Manager",
              "product_id": "T015518",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_system_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Breeze Platform",
            "product": {
              "name": "Avaya Breeze Platform",
              "product_id": "T015823",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:breeze_platform:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya CMS",
            "product": {
              "name": "Avaya CMS",
              "product_id": "997",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:call_management_system_server:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Session Border Controller",
            "product": {
              "name": "Avaya Session Border Controller",
              "product_id": "T015520",
              "product_identification_helper": {
                "cpe": "cpe:/h:avaya:session_border_controller:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Avaya"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "F5 BIG-IP",
            "product": {
              "name": "F5 BIG-IP",
              "product_id": "T001663",
              "product_identification_helper": {
                "cpe": "cpe:/a:f5:big-ip:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "F5"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HCL Commerce",
            "product": {
              "name": "HCL Commerce",
              "product_id": "T019294",
              "product_identification_helper": {
                "cpe": "cpe:/a:hcltechsw:commerce:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HCL"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Juniper JUNOS \u003c 19.1R3-S10",
                "product": {
                  "name": "Juniper JUNOS \u003c 19.1R3-S10",
                  "product_id": "T027236",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:19.1r3-s10"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Juniper JUNOS \u003c 19.4R3-S10",
                "product": {
                  "name": "Juniper JUNOS \u003c 19.4R3-S10",
                  "product_id": "T027237",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:19.4r3-s10"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Juniper JUNOS \u003c 20.2R3-S6",
                "product": {
                  "name": "Juniper JUNOS \u003c 20.2R3-S6",
                  "product_id": "T027238",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:20.2r3-s6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Juniper JUNOS \u003c 20.3R3-S6",
                "product": {
                  "name": "Juniper JUNOS \u003c 20.3R3-S6",
                  "product_id": "T027239",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:20.3r3-s6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Juniper JUNOS \u003c 20.4R3-S5",
                "product": {
                  "name": "Juniper JUNOS \u003c 20.4R3-S5",
                  "product_id": "T027240",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:20.4r3-s5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Juniper JUNOS \u003c 21.1R3-S4",
                "product": {
                  "name": "Juniper JUNOS \u003c 21.1R3-S4",
                  "product_id": "T027241",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:21.1r3-s4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Juniper JUNOS \u003c 21.2R3-S4",
                "product": {
                  "name": "Juniper JUNOS \u003c 21.2R3-S4",
                  "product_id": "T027242",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:21.2r3-s4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Juniper JUNOS \u003c 21.3R3-S3",
                "product": {
                  "name": "Juniper JUNOS \u003c 21.3R3-S3",
                  "product_id": "T027243",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:21.3r3-s3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Juniper JUNOS \u003c 21.4R3-S1",
                "product": {
                  "name": "Juniper JUNOS \u003c 21.4R3-S1",
                  "product_id": "T027244",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:21.4r3-s1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Juniper JUNOS \u003c 22.1R3",
                "product": {
                  "name": "Juniper JUNOS \u003c 22.1R3",
                  "product_id": "T027245",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:22.1r3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Juniper JUNOS \u003c 22.2R3",
                "product": {
                  "name": "Juniper JUNOS \u003c 22.2R3",
                  "product_id": "T027246",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:22.2r3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Juniper JUNOS \u003c 22.1R2-S2",
                "product": {
                  "name": "Juniper JUNOS \u003c 22.1R2-S2",
                  "product_id": "T027247",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:22.1r2-s2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Juniper JUNOS \u003c 22.2R2-S1",
                "product": {
                  "name": "Juniper JUNOS \u003c 22.2R2-S1",
                  "product_id": "T027248",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:22.2r2-s1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "JUNOS"
          },
          {
            "category": "product_name",
            "name": "Juniper Junos Space \u003c 22.2R1",
            "product": {
              "name": "Juniper Junos Space \u003c 22.2R1",
              "product_id": "T003343",
              "product_identification_helper": {
                "cpe": "cpe:/a:juniper:junos_space:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Juniper"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Meinberg LANTIME \u003c V7.04.015",
                "product": {
                  "name": "Meinberg LANTIME \u003c V7.04.015",
                  "product_id": "T022524",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:meinberg:lantime:v7.04.015"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Meinberg LANTIME \u003c V6.24.030",
                "product": {
                  "name": "Meinberg LANTIME \u003c V6.24.030",
                  "product_id": "T022525",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:meinberg:lantime:v6.24.030"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "LANTIME"
          }
        ],
        "category": "vendor",
        "name": "Meinberg"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source expat \u003c 2.4.4",
            "product": {
              "name": "Open Source expat \u003c 2.4.4",
              "product_id": "T021799",
              "product_identification_helper": {
                "cpe": "cpe:/a:expat:expat:2.4.4"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Pulse Secure Pulse Connect Secure \u003c 9.1R15",
            "product": {
              "name": "Pulse Secure Pulse Connect Secure \u003c 9.1R15",
              "product_id": "T022137",
              "product_identification_helper": {
                "cpe": "cpe:/a:pulsesecure:pulse_connect_secure:9.1r15"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Pulse Secure"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Tenable Security Nessus",
            "product": {
              "name": "Tenable Security Nessus",
              "product_id": "T016399",
              "product_identification_helper": {
                "cpe": "cpe:/a:tenable:nessus:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Tenable Security Nessus Network Monitor \u003c 6.2.1",
            "product": {
              "name": "Tenable Security Nessus Network Monitor \u003c 6.2.1",
              "product_id": "T027665",
              "product_identification_helper": {
                "cpe": "cpe:/a:tenable:nessus_network_monitor:6.2.1"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Tenable Security"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Unify OpenScape Xpert",
            "product": {
              "name": "Unify OpenScape Xpert",
              "product_id": "T018014",
              "product_identification_helper": {
                "cpe": "cpe:/h:unify:openscape_xpert:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Unify"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-23852",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in expat. Dabei handelt es sich um eine Puffer\u00fcberlauf Schwachstelle in der XML_GetBuffer Funktion. Ein Angreifer kann diese Schwachstelle ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T003343",
          "67646",
          "T015823",
          "T019294",
          "T015127",
          "T015126",
          "T004914",
          "T015520",
          "T016399",
          "950",
          "997",
          "T027238",
          "T001663",
          "T027239",
          "398363",
          "T027236",
          "T027237",
          "T027241",
          "T027242",
          "T015519",
          "T015518",
          "T027240",
          "T015517",
          "T015516",
          "T012167",
          "T018014",
          "2951",
          "T002207",
          "T000126",
          "T027247",
          "T027665",
          "T027248",
          "T027245",
          "T027246",
          "T027243",
          "T027244"
        ]
      },
      "release_date": "2022-01-23T23:00:00Z",
      "title": "CVE-2022-23852"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading...

Loading...

Loading...

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.