CVE:CVE-2022-43680
CNNVD:CNNVD-202210-1676
libexpat是一款使用C语言编写的流式XML解析器。
libexpat 2.4.9版本及之前版本存在资源管理错误漏洞，该漏洞源于在内存不足的情况下，过度破坏XML_ExternalEntityParserCreate中的共享DTD而导致内存释放后重用。
solution:Upgrade libexpat_project libexpat to a higher version than 2.4.9,and avoid the version (,2.4.9]; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37; Upgrade netapp baseboard_management_controller_h300s_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h500s_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h700s_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h410s_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h410c_firmware to a higher version than -; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp hci_compute_node_firmware to a higher version than -