CVE:CVE-2022-25314
CNNVD:CNNVD-202202-1606
Expat是一款使用C语言编写的快速流式XML解析器。
Expat 存在安全漏洞，该漏洞源于在2.4.5之前的Expat(又名libexpat)中，copyString中有一个整数溢出。
solution:Upgrade libexpat_project libexpat to a higher version than 2.4.5,and avoid the version (,2.4.5); Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade oracle http_server to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8; Upgrade siemens sinema_remote_connect_server to a higher version than 3.1,and avoid the version (,3.1)