High · published January 6, 2022
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
| Product | Versions | Fixed in |
|---|---|---|
| libexpat_project/libexpat | < 2.4.3 | 2.4.3 |
| netapp/active_iq_unified_manager | all versions | — |
| netapp/clustered_data_ontap | all versions | — |
| netapp/hci_baseboard_management_controller | all versions | — |
| netapp/hci_baseboard_management_controller | all versions | — |
| netapp/hci_baseboard_management_controller | all versions | — |
| netapp/oncommand_workflow_automation | all versions | — |
| netapp/solidfire_\&_hci_management_node | all versions | — |
| tenable/nessus | < 8.15.3 | 8.15.3 |
| tenable/nessus | ≥ 10.0.0, < 10.1.1 | 10.1.1 |
| siemens/sinema_remote_connect_server | < 3.1 | 3.1 |