Lack of data validation In expat
Description
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.14 | 2.4.5-r0 | ||
alpine v3.21 | 2.4.5-r0 | ||
alpine v3.12 | 2.2.10-r2 | ||
alpine v3.13 | 2.2.10-r4 | ||
alpine v3.15 | 2.4.5-r0 | ||
alpine v3.16 | 2.4.5-r0 | ||
alpine v3.17 | 2.4.5-r0 | ||
alpine v3.18 | 2.4.5-r0 | ||
alpine v3.19 | 2.4.5-r0 | ||
alpine v3.20 | 2.4.5-r0 |
1-10 of 37
10
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1.