wid-sec-w-2022-1844
Vulnerability from csaf_certbund
Published
2022-10-24 22:00
Modified
2024-05-26 22:00
Summary
expat: Schwachstelle ermöglicht Denial of Service

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Expat ist ein XML Parser, der in der Programmiersprache-C geschrieben ist.
Angriff
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in expat ausnutzen, um einen Denial of Service Angriff durchzuführen.
Betroffene Betriebssysteme
- Linux



{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Expat ist ein XML Parser, der in der Programmiersprache-C geschrieben ist.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in expat ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-1844 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-1844.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-1844 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1844"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-4hjv-8mmr-jxwv vom 2022-10-24",
        "url": "https://github.com/advisories/GHSA-4hjv-8mmr-jxwv"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3165 vom 2022-10-28",
        "url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00033.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5266 vom 2022-10-30",
        "url": "https://lists.debian.org/debian-security-announce/2022/msg00236.html"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202210-38 vom 2022-10-31",
        "url": "https://security.gentoo.org/glsa/202210-38"
      },
      {
        "category": "external",
        "summary": "OpenBSD 7.1 Errata",
        "url": "https://www.openbsd.org/errata71.html"
      },
      {
        "category": "external",
        "summary": "OpenBSD 7.2 Errata",
        "url": "https://www.openbsd.org/errata72.html"
      },
      {
        "category": "external",
        "summary": "Tenable Security Advisory TNS-2022-23 vom 2022-11-03",
        "url": "https://www.tenable.com/security/tns-2022-23"
      },
      {
        "category": "external",
        "summary": "Tenable Security Advisory TNS-2022-24 vom 2022-11-03",
        "url": "https://www.tenable.com/security/tns-2022-24"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:3874-1 vom 2022-11-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-November/012811.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:3884-1 vom 2022-11-07",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-November/012821.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:3912-1 vom 2022-11-08",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-November/012847.html"
      },
      {
        "category": "external",
        "summary": "Tenable Security Advisory TNS-2022-26 vom 2022-11-09",
        "url": "https://www.tenable.com/security/tns-2022-26"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6839161 vom 2022-11-15",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-http-server-is-vulnerable-to-denial-of-service-due-to-libexpat-cve-2022-43680-cve-2013-0340-cve-2017-9233/"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5638-2 vom 2022-11-17",
        "url": "https://ubuntu.com/security/notices/USN-5638-2"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20221118-0007 vom 2022-11-18",
        "url": "https://security.netapp.com/advisory/ntap-20221118-0007/"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5638-3 vom 2022-11-23",
        "url": "https://ubuntu.com/security/notices/USN-5638-3"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1885 vom 2022-12-07",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1885.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6845768 vom 2022-12-07",
        "url": "https://www.ibm.com/support/pages/node/6845768"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-261 vom 2022-12-09",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-261.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1655 vom 2022-12-10",
        "url": "https://alas.aws.amazon.com/ALAS-2022-1655.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6847293 vom 2022-12-20",
        "url": "https://www.ibm.com/support/pages/node/6847293"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6848279 vom 2022-12-23",
        "url": "https://www.ibm.com/support/pages/node/6848279"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6851439 vom 2022-12-22",
        "url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory3.asc"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0103 vom 2023-01-12",
        "url": "https://access.redhat.com/errata/RHSA-2023:0103"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-0103 vom 2023-01-12",
        "url": "https://linux.oracle.com/errata/ELSA-2023-0103.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-0337 vom 2023-01-24",
        "url": "https://linux.oracle.com/errata/ELSA-2023-0337.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0337 vom 2023-01-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:0337"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6856375 vom 2023-01-31",
        "url": "https://www.ibm.com/support/pages/node/6856375"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5638-4 vom 2023-02-28",
        "url": "https://ubuntu.com/security/notices/USN-5638-4"
      },
      {
        "category": "external",
        "summary": "RedHat Security Advisory",
        "url": "https://access.redhat.com/errata/RHSA-2024:0421"
      },
      {
        "category": "external",
        "summary": "Meinberg Security Advisory MBGSA-2023.02 vom 2023-03-14",
        "url": "https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2023-02-meinberg-lantime-firmware-v7-06-012.htm"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0104147 vom 2023-04-20",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0104147"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6985561 vom 2023-04-24",
        "url": "https://www.ibm.com/support/pages/node/6985561"
      },
      {
        "category": "external",
        "summary": "Meinberg Security Advisory MBGSA-2023.02 vom 2023-03-23",
        "url": "https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2023-02-lantime-firmware-v7-06-013.htm"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6986569 vom 2023-04-28",
        "url": "https://www.ibm.com/support/pages/node/6986569"
      },
      {
        "category": "external",
        "summary": "Hitachi Cybersecurity Advisory vom 2023-05-24",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-01"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6999237 vom 2023-05-30",
        "url": "https://www.ibm.com/support/pages/node/6999237"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:3355 vom 2023-06-05",
        "url": "https://access.redhat.com/errata/RHSA-2023:3355"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0104916 vom 2023-06-06",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0104916"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6857861 vom 2023-06-27",
        "url": "https://www.ibm.com/support/pages/node/6857861"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7008109 vom 2023-06-29",
        "url": "https://www.ibm.com/support/pages/node/7008109"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7009735 vom 2023-07-05",
        "url": "https://www.ibm.com/support/pages/node/7009735"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7006449 vom 2023-07-07",
        "url": "https://www.ibm.com/support/pages/node/7006449"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2023-069 vom 2023-07-21",
        "url": "https://www.dell.com/support/kbdoc/de-de/000210964/dsa-2023-069-dell-networker-vproxy-security-update-for-multiple-vulnerabilities-detected-on-vproxy-4-3-0-38"
      },
      {
        "category": "external",
        "summary": "F5 Security Advisory K000139525 vom 2024-05-24",
        "url": "https://my.f5.com/manage/s/article/K000139525"
      }
    ],
    "source_lang": "en-US",
    "title": "expat: Schwachstelle erm\u00f6glicht Denial of Service",
    "tracking": {
      "current_release_date": "2024-05-26T22:00:00.000+00:00",
      "generator": {
        "date": "2024-05-27T08:08:15.296+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2022-1844",
      "initial_release_date": "2022-10-24T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-10-24T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2022-10-27T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2022-10-30T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2022-10-31T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Gentoo aufgenommen"
        },
        {
          "date": "2022-11-02T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Tenable aufgenommen"
        },
        {
          "date": "2022-11-06T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE und Fedora aufgenommen"
        },
        {
          "date": "2022-11-07T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-11-08T23:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-11-09T23:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Tenable aufgenommen"
        },
        {
          "date": "2022-11-14T23:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-11-17T23:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2022-11-20T23:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von NetApp aufgenommen"
        },
        {
          "date": "2022-11-23T23:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2022-12-06T23:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Amazon und IBM aufgenommen"
        },
        {
          "date": "2022-12-11T23:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2022-12-20T23:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-12-22T23:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-01-11T23:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-01-12T23:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-01-23T23:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Oracle Linux und Red Hat aufgenommen"
        },
        {
          "date": "2023-01-31T23:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-02-28T23:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-03-13T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Meinberg aufgenommen"
        },
        {
          "date": "2023-04-19T22:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2023-04-23T22:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-04-24T22:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2023-05-01T22:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-05-23T22:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2023-05-29T22:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-06-05T22:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von Red Hat und HCL aufgenommen"
        },
        {
          "date": "2023-06-27T22:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-06-28T22:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von IBM und IBM-APAR aufgenommen"
        },
        {
          "date": "2023-07-05T22:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-07-06T22:00:00.000+00:00",
          "number": "34",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-07-23T22:00:00.000+00:00",
          "number": "35",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2024-01-24T23:00:00.000+00:00",
          "number": "36",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-05-26T22:00:00.000+00:00",
          "number": "37",
          "summary": "Neue Updates von F5 aufgenommen"
        }
      ],
      "status": "final",
      "version": "37"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vProxy \u003c4.3.0-40",
                "product": {
                  "name": "Dell NetWorker vProxy \u003c4.3.0-40",
                  "product_id": "T028847",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:vproxy__4.3.0-40"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NetWorker"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "17.1.0-17.1.1",
                "product": {
                  "name": "F5 BIG-IP 17.1.0-17.1.1",
                  "product_id": "T034899",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:17.1.0_-_17.1.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "16.1.0-16.1.4",
                "product": {
                  "name": "F5 BIG-IP 16.1.0-16.1.4",
                  "product_id": "T034901",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:16.1.0_-_16.1.4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "15.1.0-15.1.10",
                "product": {
                  "name": "F5 BIG-IP 15.1.0-15.1.10",
                  "product_id": "T034902",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:15.1.0_-_15.1.10"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "BIG-IP"
          }
        ],
        "category": "vendor",
        "name": "F5"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "8",
                "product": {
                  "name": "HCL Commerce 8",
                  "product_id": "T020130",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:hcltechsw:commerce:8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7",
                "product": {
                  "name": "HCL Commerce 7",
                  "product_id": "T027460",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:hcltechsw:commerce:7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "9.0.1.x",
                "product": {
                  "name": "HCL Commerce 9.0.1.x",
                  "product_id": "T027461",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:hcltechsw:commerce:9.0.1.x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "9.1.x",
                "product": {
                  "name": "HCL Commerce 9.1.x",
                  "product_id": "T027462",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:hcltechsw:commerce:9.1.x"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Commerce"
          }
        ],
        "category": "vendor",
        "name": "HCL"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "65x",
                "product": {
                  "name": "Hitachi Energy AFS 65x",
                  "product_id": "T027841",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:abb:afs:65x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "67x",
                "product": {
                  "name": "Hitachi Energy AFS 67x",
                  "product_id": "T027842",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:abb:afs:67x"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "AFS"
          }
        ],
        "category": "vendor",
        "name": "Hitachi Energy"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.3",
                "product": {
                  "name": "IBM AIX 7.3",
                  "product_id": "T021486",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:ibm:aix:7.3"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "AIX"
          },
          {
            "category": "product_name",
            "name": "IBM DB2",
            "product": {
              "name": "IBM DB2",
              "product_id": "5104",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:db2:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "5.5.4",
                "product": {
                  "name": "IBM FileNet Content Manager 5.5.4",
                  "product_id": "782758",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:filenet_content_manager:5.5.4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "5.5.8",
                "product": {
                  "name": "IBM FileNet Content Manager 5.5.8",
                  "product_id": "T024608",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:filenet_content_manager:5.5.8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "5.5.9",
                "product": {
                  "name": "IBM FileNet Content Manager 5.5.9",
                  "product_id": "T024609",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:filenet_content_manager:5.5.9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IBM FileNet Content Manager",
                "product": {
                  "name": "IBM FileNet Content Manager",
                  "product_id": "T025993",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:filenet_content_manager:-"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "5.5.10",
                "product": {
                  "name": "IBM FileNet Content Manager 5.5.10",
                  "product_id": "T028340",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:filenet_content_manager:5.5.10"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "FileNet Content Manager"
          },
          {
            "category": "product_name",
            "name": "IBM MQ",
            "product": {
              "name": "IBM MQ",
              "product_id": "T021398",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:mq:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "V9",
                "product": {
                  "name": "IBM Power Hardware Management Console V9",
                  "product_id": "T021107",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:hardware_management_console:v9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "DS8000",
                "product": {
                  "name": "IBM Power Hardware Management Console DS8000",
                  "product_id": "T028436",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:hardware_management_console:ds8000"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Power Hardware Management Console"
          },
          {
            "category": "product_name",
            "name": "IBM Rational ClearCase",
            "product": {
              "name": "IBM Rational ClearCase",
              "product_id": "T004180",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:rational_clearcase:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Security Access Manager for Enterprise Single Sign-On",
            "product": {
              "name": "IBM Security Access Manager for Enterprise Single Sign-On",
              "product_id": "T000094",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:security_access_manager_for_enterprise_single_sign_on:8.1"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "10.0.X",
                "product": {
                  "name": "IBM Security Verify Access 10.0.X",
                  "product_id": "T026175",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:security_verify_access:10.0.x"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Security Verify Access"
          },
          {
            "category": "product_name",
            "name": "IBM Tivoli Monitoring",
            "product": {
              "name": "IBM Tivoli Monitoring",
              "product_id": "T011128",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:tivoli_monitoring:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c4.2.0 FP17",
                "product": {
                  "name": "IBM Tivoli Network Manager \u003c4.2.0 FP17",
                  "product_id": "T027902",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:tivoli_network_manager:4.2.0:fp17"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Tivoli Network Manager"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.06.012",
                "product": {
                  "name": "Meinberg LANTIME 7.06.012",
                  "product_id": "T026735",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:meinberg:lantime:7.06.012"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c7.06.013",
                "product": {
                  "name": "Meinberg LANTIME \u003c7.06.013",
                  "product_id": "T027496",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:meinberg:lantime:7.06.013"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "LANTIME"
          }
        ],
        "category": "vendor",
        "name": "Meinberg"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp ActiveIQ Unified Manager",
            "product": {
              "name": "NetApp ActiveIQ Unified Manager",
              "product_id": "658714",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:active_iq_unified_manager:-::~~~vmware_vsphere~~"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=2.4.9",
                "product": {
                  "name": "Open Source expat \u003c=2.4.9",
                  "product_id": "T024686",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:expat:expat:2.4.9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "expat"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.1",
                "product": {
                  "name": "OpenBSD OpenBSD 7.1",
                  "product_id": "T023225",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:openbsd:openbsd:7.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.2",
                "product": {
                  "name": "OpenBSD OpenBSD 7.2",
                  "product_id": "T025100",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:openbsd:openbsd:7.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "OpenBSD"
          }
        ],
        "category": "vendor",
        "name": "OpenBSD"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "10.3.2",
                "product": {
                  "name": "Tenable Security Nessus 10.3.2",
                  "product_id": "T025192",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tenable:nessus:10.3.2"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c10.4.1",
                "product": {
                  "name": "Tenable Security Nessus \u003c10.4.1",
                  "product_id": "T025193",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tenable:nessus:10.4.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c8.15.7",
                "product": {
                  "name": "Tenable Security Nessus \u003c8.15.7",
                  "product_id": "T025285",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tenable:nessus:8.15.7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Nessus"
          }
        ],
        "category": "vendor",
        "name": "Tenable Security"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-43680",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in expat aufgrund einer Use-After-Free Situation im Zusammenhang mit \"shared DTD\" in \"XML_ExternalEntityParserCreate\". Ein Angreifer kann dies f\u00fcr einen Denial of Service Angriff ausnutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T000094",
          "T025193",
          "T028340",
          "67646",
          "T034902",
          "T011128",
          "T025192",
          "T034901",
          "658714",
          "T004914",
          "782758",
          "T028847",
          "T025993",
          "398363",
          "T021398",
          "T027496",
          "T027461",
          "T034899",
          "T027462",
          "T026175",
          "T027460",
          "T012167",
          "T024609",
          "T024608",
          "2951",
          "T002207",
          "T023225",
          "T027902",
          "T000126",
          "T021107",
          "T026735",
          "5104",
          "T004180",
          "T027841",
          "T027842",
          "T028436",
          "T021486",
          "T025285",
          "T020130",
          "T025100"
        ],
        "last_affected": [
          "T024686"
        ]
      },
      "release_date": "2022-10-24T22:00:00Z",
      "title": "CVE-2022-43680"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading...

Loading...

Loading...
  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.