CVE:CVE-2022-23990
CNNVD:CNNVD-202201-2483
Expat是一款使用C语言编写的快速流式XML解析器。
Expat 2.4.4之前版本存在安全漏洞，该漏洞源于doProlog函数中存在整数溢出。
solution:Upgrade libexpat_project libexpat to a higher version than 2.4.4,and avoid the version (,2.4.4); Upgrade tenable nessus to a higher version than 8.15.3,10.1.1,and avoid the version (,8.15.3),[10.0.0,10.1.1); Upgrade oracle communications_metasolv_solution to a higher version than 6.3.1,and avoid the version 6.3.1; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade siemens sinema_remote_connect_server to a higher version than 3.1,and avoid the version (,3.1)