The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0108 advisory.

    This advisory aggregates security fixes for the mingw-expat SRPM in CIQ LTS 8.6. It addresses 8 CVEs:
    CVE-2022-23990, CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25314, and 3 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0183 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2022-23990:
    Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

    CVE-2022-25235:
    xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks     for whether a UTF-8 character is valid in a certain context.

    CVE-2022-25236:
    xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters     into namespace URIs.

    CVE-2022-25313:
    In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large     nesting depth in the DTD element.

    CVE-2022-25314:
    In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.

    CVE-2022-25315:
    In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:22785 advisory.

    Expat is a C library for parsing XML documents.

    Security Fix(es):

    * expat: internal entity expansion (CVE-2013-0340)

    * expat: Large number of prefixed XML attributes on a single tag can crash libexpat (CVE-2021-45960)

    * expat: Integer overflow in doProlog in xmlparse.c (CVE-2021-46143)

    * expat: Integer overflow in addBinding in xmlparse.c (CVE-2022-22822)

    * expat: Integer overflow in build_model in xmlparse.c (CVE-2022-22823)

    * expat: Integer overflow in defineAttribute in xmlparse.c (CVE-2022-22824)

    * expat: Integer overflow in lookup in xmlparse.c (CVE-2022-22825)

    * expat: Integer overflow in nextScaffoldPart in xmlparse.c (CVE-2022-22826)

    * expat: Integer overflow in storeAtts in xmlparse.c (CVE-2022-22827)

    * expat: integer overflow in the doProlog function (CVE-2022-23990)

    * expat: Stack exhaustion in doctype parsing (CVE-2022-25313)

    * expat: Integer overflow in copyString() (CVE-2022-25314)

    * expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate     (CVE-2022-43680)

    * expat: parsing large tokens can trigger a denial of service (CVE-2023-52425)

    * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)

    * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small     document that is submitted for parsing (CVE-2025-59375)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5320-1 advisory.

    USN-5288-1 fixed several vulnerabilities in Expat. For CVE-2022-25236 it caused a regression and an     additional patch was required. This update address this regression and several other vulnerabilities.

    It was discovered that Expat incorrectly handled certain files. An attacker could possibly use this issue     to cause a denial of service. (CVE-2022-25313)

    It was discovered that Expat incorrectly handled certain files. An attacker could possibly use this issue     to cause a crash or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,     and Ubuntu 21.10. (CVE-2022-25314)

    It was discovered that Expat incorrectly handled certain files. An attacker could possibly use this issue     to cause a crash or execute arbitrary code. (CVE-2022-25315)



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0698-1 advisory.

    - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs     (bsc#1196025).
    - CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026).
    - CVE-2022-25313: Fixed stack exhaustion in build_model() via uncontrolled recursion (bsc#1196168).
    - CVE-2022-25314: Fixed integer overflow in copyString (bsc#1196169).
    - CVE-2022-25315: Fixed integer overflow in storeRawNames (bsc#1196171).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5314 advisory.

    Expat is a C library for parsing XML documents.

    Security Fix(es):

    * expat: stack exhaustion in doctype parsing (CVE-2022-25313)

    * expat: integer overflow in copyString() (CVE-2022-25314)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5244 advisory.

    Expat is a C library for parsing XML documents.

    Security Fix(es):

    * expat: stack exhaustion in doctype parsing (CVE-2022-25313)

    * expat: integer overflow in copyString() (CVE-2022-25314)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5244 advisory.

    - Improve fix for CVE-2022-25313
    - Related: CVE-2022-25313
    - Resolves: CVE-2022-25314

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202209-24 (Expat: Multiple Vulnerabilities)

  - In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in     xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
    (CVE-2021-45960)

  - In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for     m_groupSize. (CVE-2021-46143)

  - addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. (CVE-2022-22822)

  - build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. (CVE-2022-22823)

  - defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
    (CVE-2022-22824)

  - lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. (CVE-2022-22825)

  - nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
    (CVE-2022-22826)

  - storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. (CVE-2022-22827)

  - Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with     a nonzero XML_CONTEXT_BYTES. (CVE-2022-23852)

  - Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function. (CVE-2022-23990)

  - xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks     for whether a UTF-8 character is valid in a certain context. (CVE-2022-25235)

  - xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters     into namespace URIs. (CVE-2022-25236)

  - In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large     nesting depth in the DTD element. (CVE-2022-25313)

  - In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString. (CVE-2022-25314)

  - In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. (CVE-2022-25315)

  - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. (CVE-2022-40674)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:5244 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of expat installed on the remote host is prior to 2.4.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-232 advisory.

  - In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in     xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
    (CVE-2021-45960)

  - In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for     m_groupSize. (CVE-2021-46143)

  - addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. (CVE-2022-22822)

  - build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. (CVE-2022-22823)

  - defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
    (CVE-2022-22824)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
354874	Rocky Linux 8.6 [CIQ] Security Update: mingw32-expat / mingw64-expat Multiple Vulnerabilities (ciqsa-2026_0108)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/12/2026	critical
236567	Alibaba Cloud Linux 3 : 0183: mingw-expat (ALINUX3-SA-2022:0183)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	critical
277504	RHEL 8 : expat (RHSA-2025:22785)	Nessus	Red Hat Local Security Checks	12/4/2025	12/4/2025	critical
158789	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Expat vulnerabilities and regression (USN-5320-1)	Nessus	Ubuntu Local Security Checks	3/10/2022	9/3/2025	critical
158601	SUSE SLES12 Security Update : expat (SUSE-SU-2022:0698-1)	Nessus	SuSE Local Security Checks	3/5/2022	6/26/2026	critical
162630	RHEL 8 : expat (RHSA-2022:5314)	Nessus	Red Hat Local Security Checks	6/30/2022	11/7/2024	high
162666	RHEL 9 : expat (RHSA-2022:5244)	Nessus	Red Hat Local Security Checks	7/1/2022	11/8/2024	high
162802	Oracle Linux 9 : expat (ELSA-2022-5244)	Nessus	Oracle Linux Local Security Checks	7/7/2022	10/22/2024	high
165540	GLSA-202209-24 : Expat: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	9/29/2022	10/10/2023	critical
167709	AlmaLinux 9 : expat (ALSA-2022:5244)	Nessus	Alma Linux Local Security Checks	11/16/2022	11/17/2022	high
168581	Amazon Linux 2022 : expat (ALAS2022-2022-232)	Nessus	Amazon Linux Local Security Checks	12/9/2022	12/11/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

high

high

high

critical

high

critical