High · published January 2, 2022
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
| Product | Versions | Fixed in |
|---|---|---|
| libexpat_project/libexpat | < 2.4.3 | 2.4.3 |
| tenable/nessus | < 8.15.3 | 8.15.3 |
| tenable/nessus | ≥ 10.0.0, < 10.1.1 | 10.1.1 |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| siemens/sinema_remote_connect_server | < 3.1 | 3.1 |
| netapp/active_iq_unified_manager | all versions | — |
| netapp/hci_baseboard_management_controller | all versions | — |
| netapp/hci_baseboard_management_controller | all versions | — |
| netapp/hci_baseboard_management_controller | all versions | — |
| netapp/oncommand_workflow_automation | all versions | — |
| netapp/solidfire_\&_hci_management_node | all versions | — |