wid-sec-w-2022-0062
Vulnerability from csaf_certbund
Published
2022-02-15 23:00
Modified
2024-05-01 22:00
Summary
expat: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Expat ist ein XML Parser, der in der Programmiersprache-C geschrieben ist.
Angriff
Ein Angreifer kann mehrere Schwachstellen in expat ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Betroffene Betriebssysteme
- Appliance
- Linux
- Sonstiges
- UNIX
- Windows
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Expat ist ein XML Parser, der in der Programmiersprache-C geschrieben ist.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein Angreifer kann mehrere Schwachstellen in expat ausnutzen, um Sicherheitsvorkehrungen zu umgehen.", "title": "Angriff" }, { "category": "general", "text": "- Appliance\n- Linux\n- Sonstiges\n- UNIX\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2022-0062 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0062.json" }, { "category": "self", "summary": "WID-SEC-2022-0062 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0062" }, { "category": "external", "summary": "Aruba Product Security Advisory ARUBA-PSA-2022-010 vom 2022-06-03", "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-010.txt" }, { "category": "external", "summary": "AVAYA Security Advisory ASA-2022-067 vom 2022-05-16", "url": "https://downloads.avaya.com/css/P8/documents/101081824" }, { "category": "external", "summary": "AVAYA Security Advisory ASA-2022-068 vom 2022-05-16", "url": "https://downloads.avaya.com/css/P8/documents/101081825" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALAS-2022-080 vom 2022-05-20", "url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-080.html" }, { "category": "external", "summary": "National Vulnerability Database vom 2022-02-15", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25235" }, { "category": "external", "summary": "National Vulnerability Database vom 2022-02-15", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25236" }, { "category": "external", "summary": "Ubuntu Security Notice USN-5288-1 vom 2022-02-21", "url": "https://ubuntu.com/security/notices/USN-5288-1" }, { "category": "external", "summary": "Debian Security Advisory DSA-5085 vom 2022-02-22", "url": "https://lists.debian.org/debian-security-announce/2022/msg00052.html" }, { "category": "external", "summary": "OpenBSD 7.0 errata", "url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.0/common/015_expat.patch.sig" }, { "category": "external", "summary": "Tenable Security Advisory", "url": "https://www.tenable.com/security/tns-2022-11" }, { "category": "external", "summary": "Tenable Security Advisory", "url": "https://www.tenable.com/security/tns-2022-12" }, { "category": "external", "summary": "NetApp Security Advisory NTAP-20220303-0008 vom 2022-03-03", "url": "https://security.netapp.com/advisory/ntap-20220303-0008/" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2022:0698-1 vom 2022-03-03", "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-March/010336.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2022:0713-1 vom 2022-03-04", "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-March/010357.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2022:14903-1 vom 2022-03-04", "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-March/010361.html" }, { "category": "external", "summary": "Debian Security Advisory DLA-2935 vom 2022-03-07", "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALAS-2022-1573 vom 2022-03-11", "url": "https://alas.aws.amazon.com/ALAS-2022-1573.html" }, { "category": "external", "summary": "Ubuntu Security Notice USN-5320-1 vom 2022-03-10", "url": "https://ubuntu.com/security/notices/USN-5320-1" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALAS-2022-1764 vom 2022-03-10", "url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1764.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0824 vom 2022-03-10", "url": "https://access.redhat.com/errata/RHSA-2022:0824" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0817 vom 2022-03-10", "url": "https://access.redhat.com/errata/RHSA-2022:0817" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0818 vom 2022-03-10", "url": "https://access.redhat.com/errata/RHSA-2022:0818" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0816 vom 2022-03-10", "url": "https://access.redhat.com/errata/RHSA-2022:0816" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0815 vom 2022-03-10", "url": "https://access.redhat.com/errata/RHSA-2022:0815" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0853 vom 2022-03-14", "url": "https://access.redhat.com/errata/RHSA-2022:0853" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2022-0850 vom 2022-03-14", "url": "http://linux.oracle.com/errata/ELSA-2022-0850.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0847 vom 2022-03-14", "url": "https://access.redhat.com/errata/RHSA-2022:0847" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0850 vom 2022-03-14", "url": "https://access.redhat.com/errata/RHSA-2022:0850" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2022-0845 vom 2022-03-14", "url": "http://linux.oracle.com/errata/ELSA-2022-0845.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0843 vom 2022-03-14", "url": "https://access.redhat.com/errata/RHSA-2022:0843" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0845 vom 2022-03-14", "url": "https://access.redhat.com/errata/RHSA-2022:0845" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALAS-2022-1585 vom 2022-05-24", "url": "https://alas.aws.amazon.com/ALAS-2022-1585.html" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALAS-2022-1795 vom 2022-05-24", "url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1795.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2022:0844-1 vom 2022-03-15", "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-March/010445.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2022:0842-1 vom 2022-03-15", "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-March/010442.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0951 vom 2022-03-16", "url": "https://access.redhat.com/errata/RHSA-2022:0951" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2022-0951 vom 2022-03-17", "url": "http://linux.oracle.com/errata/ELSA-2022-0951.html" }, { "category": "external", "summary": "AVAYA Security Advisory ASA-2022-031 vom 2022-03-17", "url": "https://downloads.avaya.com/css/P8/documents/101080937" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:1012 vom 2022-03-22", "url": "https://access.redhat.com/errata/RHSA-2022:1012" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:1053 vom 2022-03-24", "url": "https://access.redhat.com/errata/RHSA-2022:1053" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:1068 vom 2022-03-28", "url": "https://access.redhat.com/errata/RHSA-2022:1068" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:1069 vom 2022-03-28", "url": "https://access.redhat.com/errata/RHSA-2022:1069" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:1070 vom 2022-03-28", "url": "https://access.redhat.com/errata/RHSA-2022:1070" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2022-1069 vom 2022-03-28", "url": "http://linux.oracle.com/errata/ELSA-2022-1069.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2022:14934-1 vom 2022-03-31", "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-March/010614.html" }, { "category": "external", "summary": "Meinberg Security Advisory MBGSA-2022.01 vom 2022-04-05", "url": "https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2022-01-meinberg-lantime-firmware-v7-04-015-und-v6-24-030.htm" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:1263 vom 2022-04-07", "url": "https://access.redhat.com/errata/RHSA-2022:1263" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:1309 vom 2022-04-12", "url": "https://access.redhat.com/errata/RHSA-2022:1309" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2022:0844-2 vom 2022-04-20", "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010758.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:1476 vom 2022-04-21", "url": "https://access.redhat.com/errata/RHSA-2022:1476" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:1539 vom 2022-04-26", "url": "https://access.redhat.com/errata/RHSA-2022:1539" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:1540 vom 2022-04-26", "url": "https://access.redhat.com/errata/RHSA-2022:1540" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:1643 vom 2022-04-29", "url": "https://access.redhat.com/errata/RHSA-2022:1643" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:1644 vom 2022-04-29", "url": "https://access.redhat.com/errata/RHSA-2022:1644" }, { "category": "external", "summary": "F5 Security Advisory K19473898 vom 2022-04-30", "url": "https://support.f5.com/csp/article/K19473898" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2022-1643 vom 2022-05-02", "url": "http://linux.oracle.com/errata/ELSA-2022-1643.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:1622 vom 2022-05-04", "url": "https://access.redhat.com/errata/RHSA-2022:1622" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2022-9359 vom 2022-05-06", "url": "https://linux.oracle.com/errata/ELSA-2022-9359.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2022:2294-1 vom 2022-07-06", "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-July/011419.html" }, { "category": "external", "summary": "HPE Security Bulltein", "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbnw04308en_us\u0026hprpt_id=ALERT_HPE_3029170\u0026jumpid=em_pom8nu6hj_aid-520066529" }, { "category": "external", "summary": "Autodesk Security Advisory ADSK-SA-2022-0017 vom 2022-08-02", "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0017" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202209-24 vom 2022-09-29", "url": "https://security.gentoo.org/glsa/202209-24" }, { "category": "external", "summary": "Juniper Security Bulletin", "url": "https://supportportal.juniper.net/s/article/2022-10-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-22-2R1-release" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:7143 vom 2022-10-27", "url": "https://access.redhat.com/errata/RHSA-2022:7143" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:7144 vom 2022-10-27", "url": "https://access.redhat.com/errata/RHSA-2022:7144" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2022-6997 vom 2022-10-27", "url": "https://linux.oracle.com/errata/ELSA-2022-6997.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2022-6711 vom 2022-10-27", "url": "https://linux.oracle.com/errata/ELSA-2022-6711.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2022-7069 vom 2022-10-27", "url": "https://linux.oracle.com/errata/ELSA-2022-7069.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:7811 vom 2022-11-08", "url": "https://access.redhat.com/errata/RHSA-2022:7811" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALAS-2022-232 vom 2022-12-09", "url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-232.html" }, { "category": "external", "summary": "Juniper Security Bulletin vom 2023-04-13", "url": "https://supportportal.juniper.net/s/article/2023-04-Security-Bulletin-Junos-OS-Multiple-vulnerabilities-in-expat-resolved?language=en_US" }, { "category": "external", "summary": "Tenable Security Advisory TNS-2023-19 vom 2023-05-10", "url": "https://www.tenable.com/security/tns-2023-19" }, { "category": "external", "summary": "HPE Securi+y Bulletin", "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbst04494en_us" }, { "category": "external", "summary": "ORACLE OVMSA-2023-0009 vom 2023-08-17", "url": "https://oss.oracle.com/pipermail/oraclevm-errata/2023-August/001078.html" }, { "category": "external", "summary": "Brocade Security Advisory BSA-2023-1869 vom 2024-04-16", "url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/22402" }, { "category": "external", "summary": "Brocade Security Advisory BSA-2023-1868 vom 2024-04-16", "url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/22403" }, { "category": "external", "summary": "HPE Security Bulletin vom 2024-04-25", "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04635en_us\u0026docLocale=en_US" }, { "category": "external", "summary": "Broadcom Security Advisory vom 2024-04-30", "url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/23299" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0782-2 vom 2024-04-30", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-April/018443.html" } ], "source_lang": "en-US", "title": "expat: Mehrere Schwachstellen erm\u00f6glichen Umgehen von Sicherheitsvorkehrungen", "tracking": { "current_release_date": "2024-05-01T22:00:00.000+00:00", "generator": { "date": "2024-08-15T17:26:17.153+00:00", "engine": { "name": "BSI-WID", "version": "1.3.5" } }, "id": "WID-SEC-W-2022-0062", "initial_release_date": "2022-02-15T23:00:00.000+00:00", "revision_history": [ { "date": "2022-02-15T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2022-02-21T23:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Ubuntu aufgenommen" }, { "date": "2022-02-22T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2022-02-23T23:00:00.000+00:00", "number": "4", "summary": "Neue Updates aufgenommen" }, { "date": "2022-03-02T23:00:00.000+00:00", "number": "5", "summary": "Neue Updates von NetApp aufgenommen" }, { "date": "2022-03-03T23:00:00.000+00:00", "number": "6", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2022-03-06T23:00:00.000+00:00", "number": "7", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2022-03-07T23:00:00.000+00:00", "number": "8", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2022-03-10T23:00:00.000+00:00", "number": "9", "summary": "Neue Updates von Amazon, Ubuntu und Red Hat aufgenommen" }, { "date": "2022-03-14T23:00:00.000+00:00", "number": "10", "summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen" }, { "date": "2022-03-15T23:00:00.000+00:00", "number": "11", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2022-03-16T23:00:00.000+00:00", "number": "12", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-03-17T23:00:00.000+00:00", "number": "13", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2022-03-20T23:00:00.000+00:00", "number": "14", "summary": "Neue Updates von AVAYA aufgenommen" }, { "date": "2022-03-22T23:00:00.000+00:00", "number": "15", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-03-24T23:00:00.000+00:00", "number": "16", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-03-28T22:00:00.000+00:00", "number": "17", "summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen" }, { "date": "2022-03-31T22:00:00.000+00:00", "number": "18", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2022-04-04T22:00:00.000+00:00", "number": "19", "summary": "Neue Updates von Meinberg aufgenommen" }, { "date": "2022-04-06T22:00:00.000+00:00", "number": "20", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-04-12T22:00:00.000+00:00", "number": "21", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-04-19T22:00:00.000+00:00", "number": "22", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2022-04-21T22:00:00.000+00:00", "number": "23", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-04-26T22:00:00.000+00:00", "number": "24", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-04-28T22:00:00.000+00:00", "number": "25", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-05-01T22:00:00.000+00:00", "number": "26", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-05-02T22:00:00.000+00:00", "number": "27", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2022-05-04T22:00:00.000+00:00", "number": "28", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-05-08T22:00:00.000+00:00", "number": "29", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2022-05-17T22:00:00.000+00:00", "number": "30", "summary": "Neue Updates von AVAYA aufgenommen" }, { "date": "2022-05-19T22:00:00.000+00:00", "number": "31", "summary": "Neue Updates von Amazon aufgenommen" }, { "date": "2022-05-24T22:00:00.000+00:00", "number": "32", "summary": "Neue Updates von Amazon aufgenommen" }, { "date": "2022-05-26T22:00:00.000+00:00", "number": "33", "summary": "Neue Updates von Tenable aufgenommen" }, { "date": "2022-06-02T22:00:00.000+00:00", "number": "34", "summary": "Neue Updates von Aruba aufgenommen" }, { "date": "2022-07-06T22:00:00.000+00:00", "number": "35", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2022-07-24T22:00:00.000+00:00", "number": "36", "summary": "Neue Updates von HP aufgenommen" }, { "date": "2022-08-01T22:00:00.000+00:00", "number": "37", "summary": "Neue Updates von Autodesk aufgenommen" }, { "date": "2022-09-29T22:00:00.000+00:00", "number": "38", "summary": "Neue Updates von Gentoo aufgenommen" }, { "date": "2022-10-12T22:00:00.000+00:00", "number": "39", "summary": "Neue Updates aufgenommen" }, { "date": "2022-10-26T22:00:00.000+00:00", "number": "40", "summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen" }, { "date": "2022-11-08T23:00:00.000+00:00", "number": "41", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-12-11T23:00:00.000+00:00", "number": "42", "summary": "Neue Updates von Amazon aufgenommen" }, { "date": "2023-04-12T22:00:00.000+00:00", "number": "43", "summary": "Neue Updates von Juniper aufgenommen" }, { "date": "2023-05-09T22:00:00.000+00:00", "number": "44", "summary": "Neue Updates von Tenable aufgenommen" }, { "date": "2023-08-13T22:00:00.000+00:00", "number": "45", "summary": "Neue Updates von HP aufgenommen" }, { "date": "2023-08-17T22:00:00.000+00:00", "number": "46", "summary": "Neue Updates von ORACLE aufgenommen" }, { "date": "2024-04-15T22:00:00.000+00:00", "number": "47", "summary": "Neue Updates von BROCADE aufgenommen" }, { "date": "2024-04-16T22:00:00.000+00:00", "number": "48", "summary": "Neue Updates von BROCADE aufgenommen" }, { "date": "2024-04-24T22:00:00.000+00:00", "number": "49", "summary": "Neue Updates von HP aufgenommen" }, { "date": "2024-05-01T22:00:00.000+00:00", "number": "50", "summary": "Neue Updates von SUSE aufgenommen" } ], "status": "final", "version": "50" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Amazon Linux 2", "product": { "name": "Amazon Linux 2", "product_id": "398363", "product_identification_helper": { "cpe": "cpe:/o:amazon:linux_2:-" } } } ], "category": "vendor", "name": "Amazon" }, { "branches": [ { "category": "product_name", "name": "Aruba ClearPass Policy Manager", "product": { "name": "Aruba ClearPass Policy Manager", "product_id": "T023403", "product_identification_helper": { "cpe": "cpe:/a:arubanetworks:clearpass_policy_manager:-" } } }, { "category": "product_name", "name": "Aruba Switch", "product": { "name": "Aruba Switch", "product_id": "T016786", "product_identification_helper": { "cpe": "cpe:/h:arubanetworks:switch:-" } } } ], "category": "vendor", "name": "Aruba" }, { "branches": [ { "category": "product_name", "name": "Autodesk AutoCAD", "product": { "name": "Autodesk AutoCAD", "product_id": "950", "product_identification_helper": { "cpe": "cpe:/a:autodesk:autocad:-" } } } ], "category": "vendor", "name": "Autodesk" }, { "branches": [ { "category": "product_name", "name": "Avaya Aura Application Enablement Services", "product": { "name": "Avaya Aura Application Enablement Services", "product_id": "T015516", "product_identification_helper": { "cpe": "cpe:/a:avaya:aura_application_enablement_services:-" } } }, { "category": "product_name", "name": "Avaya Aura Communication Manager", "product": { "name": "Avaya Aura Communication Manager", "product_id": "T015126", "product_identification_helper": { "cpe": "cpe:/a:avaya:communication_manager:-" } } }, { "category": "product_name", "name": "Avaya Aura Device Services", "product": { "name": "Avaya Aura Device Services", "product_id": "T015517", "product_identification_helper": { "cpe": "cpe:/a:avaya:aura_device_services:-" } } }, { "category": "product_name", "name": "Avaya Aura Experience Portal", "product": { "name": "Avaya Aura Experience Portal", "product_id": "T015519", "product_identification_helper": { "cpe": "cpe:/a:avaya:aura_experience_portal:-" } } }, { "category": "product_name", "name": "Avaya Aura Session Manager", "product": { "name": "Avaya Aura Session Manager", "product_id": "T015127", "product_identification_helper": { "cpe": "cpe:/a:avaya:session_manager:-" } } }, { "category": "product_name", "name": "Avaya Aura System Manager", "product": { "name": "Avaya Aura System Manager", "product_id": "T015518", "product_identification_helper": { "cpe": "cpe:/a:avaya:aura_system_manager:-" } } }, { "category": "product_name", "name": "Avaya Breeze Platform", "product": { "name": "Avaya Breeze Platform", "product_id": "T015823", "product_identification_helper": { "cpe": "cpe:/a:avaya:breeze_platform:-" } } }, { "category": "product_name", "name": "Avaya CMS", "product": { "name": "Avaya CMS", "product_id": "997", "product_identification_helper": { "cpe": "cpe:/a:avaya:call_management_system_server:-" } } }, { "category": "product_name", "name": "Avaya Session Border Controller", "product": { "name": "Avaya Session Border Controller", "product_id": "T015520", "product_identification_helper": { "cpe": "cpe:/h:avaya:session_border_controller:-" } } } ], "category": "vendor", "name": "Avaya" }, { "branches": [ { "category": "product_name", "name": "Broadcom Brocade Switch", "product": { "name": "Broadcom Brocade Switch", "product_id": "T015844", "product_identification_helper": { "cpe": "cpe:/h:brocade:switch:-" } } }, { "branches": [ { "category": "product_version_range", "name": "\u003c9.2.0", "product": { "name": "Broadcom Fabric OS \u003c9.2.0", "product_id": "1468315" } }, { "category": "product_version_range", "name": "\u003c9.2.1", "product": { "name": "Broadcom Fabric OS \u003c9.2.1", "product_id": "T034127" } }, { "category": "product_version_range", "name": "\u003c9.1.1d", "product": { "name": "Broadcom Fabric OS \u003c9.1.1d", "product_id": "T034128" } }, { "category": "product_version_range", "name": "\u003c9.2.0b", "product": { "name": "Broadcom Fabric OS \u003c9.2.0b", "product_id": "T034260" } }, { "category": "product_version_range", "name": "\u003c8.2.3e", "product": { "name": "Broadcom Fabric OS \u003c8.2.3e", "product_id": "T034262" } }, { "category": "product_version_range", "name": "\u003c9.2.1", "product": { "name": "Broadcom Fabric OS \u003c9.2.1", "product_id": "T034487" } } ], "category": "product_name", "name": "Fabric OS" } ], "category": "vendor", "name": "Broadcom" }, { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "category": "product_name", "name": "F5 BIG-IP", "product": { "name": "F5 BIG-IP", "product_id": "T001663", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip:-" } } } ], "category": "vendor", "name": "F5" }, { "branches": [ { "category": "product_name", "name": "Gentoo Linux", "product": { "name": "Gentoo Linux", "product_id": "T012167", "product_identification_helper": { "cpe": "cpe:/o:gentoo:linux:-" } } } ], "category": "vendor", "name": "Gentoo" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "HPE Switch", "product": { "name": "HPE Switch", "product_id": "T005119", "product_identification_helper": { "cpe": "cpe:/h:hp:switch:-" } } }, { "category": "product_name", "name": "HPE Switch", "product": { "name": "HPE Switch", "product_id": "T029100", "product_identification_helper": { "cpe": "cpe:/h:hp:switch:san_switch" } } } ], "category": "product_name", "name": "Switch" } ], "category": "vendor", "name": "HPE" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c19.1R3-S10", "product": { "name": "Juniper JUNOS \u003c19.1R3-S10", "product_id": "T027236" } }, { "category": "product_version_range", "name": "\u003c19.4R3-S10", "product": { "name": "Juniper JUNOS \u003c19.4R3-S10", "product_id": "T027237" } }, { "category": "product_version_range", "name": "\u003c20.2R3-S6", "product": { "name": "Juniper JUNOS \u003c20.2R3-S6", "product_id": "T027238" } }, { "category": "product_version_range", "name": "\u003c20.3R3-S6", "product": { "name": "Juniper JUNOS \u003c20.3R3-S6", "product_id": "T027239" } }, { "category": "product_version_range", "name": "\u003c20.4R3-S5", "product": { "name": "Juniper JUNOS \u003c20.4R3-S5", "product_id": "T027240" } }, { "category": "product_version_range", "name": "\u003c21.1R3-S4", "product": { "name": "Juniper JUNOS \u003c21.1R3-S4", "product_id": "T027241" } }, { "category": "product_version_range", "name": "\u003c21.2R3-S4", "product": { "name": "Juniper JUNOS \u003c21.2R3-S4", "product_id": "T027242" } }, { "category": "product_version_range", "name": "\u003c21.3R3-S3", "product": { "name": "Juniper JUNOS \u003c21.3R3-S3", "product_id": "T027243" } }, { "category": "product_version_range", "name": "\u003c21.4R3-S1", "product": { "name": "Juniper JUNOS \u003c21.4R3-S1", "product_id": "T027244" } }, { "category": "product_version_range", "name": "\u003c22.1R3", "product": { "name": "Juniper JUNOS \u003c22.1R3", "product_id": "T027245" } }, { "category": "product_version_range", "name": "\u003c22.2R3", "product": { "name": "Juniper JUNOS \u003c22.2R3", "product_id": "T027246" } }, { "category": "product_version_range", "name": "\u003c22.1R2-S2", "product": { "name": "Juniper JUNOS \u003c22.1R2-S2", "product_id": "T027247" } }, { "category": "product_version_range", "name": "\u003c22.2R2-S1", "product": { "name": "Juniper JUNOS \u003c22.2R2-S1", "product_id": "T027248" } } ], "category": "product_name", "name": "JUNOS" }, { "branches": [ { "category": "product_version_range", "name": "\u003c22.2R1", "product": { "name": "Juniper Junos Space \u003c22.2R1", "product_id": "T003343" } } ], "category": "product_name", "name": "Junos Space" } ], "category": "vendor", "name": "Juniper" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003cV7.04.015", "product": { "name": "Meinberg LANTIME \u003cV7.04.015", "product_id": "T022524" } }, { "category": "product_version_range", "name": "\u003cV6.24.030", "product": { "name": "Meinberg LANTIME \u003cV6.24.030", "product_id": "T022525" } } ], "category": "product_name", "name": "LANTIME" } ], "category": "vendor", "name": "Meinberg" }, { "branches": [ { "category": "product_name", "name": "NetApp Data ONTAP", "product": { "name": "NetApp Data ONTAP", "product_id": "7654", "product_identification_helper": { "cpe": "cpe:/a:netapp:data_ontap:-" } } } ], "category": "vendor", "name": "NetApp" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c2.4.5", "product": { "name": "Open Source expat \u003c2.4.5", "product_id": "T022079" } } ], "category": "product_name", "name": "expat" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } }, { "branches": [ { "category": "product_version", "name": "3", "product": { "name": "Oracle VM 3", "product_id": "T019617", "product_identification_helper": { "cpe": "cpe:/a:oracle:vm:3" } } } ], "category": "product_name", "name": "VM" } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "category": "product_name", "name": "Tenable Security Nessus", "product": { "name": "Tenable Security Nessus", "product_id": "T016399", "product_identification_helper": { "cpe": "cpe:/a:tenable:nessus:-" } } }, { "branches": [ { "category": "product_version_range", "name": "\u003c6.2.1", "product": { "name": "Tenable Security Nessus Network Monitor \u003c6.2.1", "product_id": "T027665" } } ], "category": "product_name", "name": "Nessus Network Monitor" } ], "category": "vendor", "name": "Tenable Security" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-25235", "notes": [ { "category": "description", "text": "In expat existieren mehrere Schwachstellen. Es fehlen bestimmte Validierungen der Kodierung, z. B. der \u00dcberpr\u00fcfung, ob ein UTF-8-Zeichen in einem bestimmten Kontext g\u00fcltig ist. Weiterhin erlaubt die Software, Namespace-Trennzeichen in Namespace-URIs einzuf\u00fcgen. Ein Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "T034128", "T034127", "T003343", "67646", "T015823", "T015844", "T015127", "T015126", "T034262", "T004914", "T015520", "T016399", "T034487", "950", "T034260", "997", "T027238", "T001663", "T019617", "T027239", "398363", "T027236", "T027237", "T027241", "T027242", "T029100", "T015519", "T015518", "T027240", "T015517", "T015516", "7654", "T005119", "T012167", "T016786", "1468315", "2951", "T002207", "T000126", "T023403", "T027247", "T027665", "T027248", "T027245", "T027246", "T027243", "T027244" ] }, "release_date": "2022-02-15T23:00:00.000+00:00", "title": "CVE-2022-25235" }, { "cve": "CVE-2022-25236", "notes": [ { "category": "description", "text": "In expat existieren mehrere Schwachstellen. Es fehlen bestimmte Validierungen der Kodierung, z. B. der \u00dcberpr\u00fcfung, ob ein UTF-8-Zeichen in einem bestimmten Kontext g\u00fcltig ist. Weiterhin erlaubt die Software, Namespace-Trennzeichen in Namespace-URIs einzuf\u00fcgen. Ein Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "T034128", "T034127", "T003343", "67646", "T015823", "T015844", "T015127", "T015126", "T034262", "T004914", "T015520", "T016399", "T034487", "950", "T034260", "997", "T027238", "T001663", "T019617", "T027239", "398363", "T027236", "T027237", "T027241", "T027242", "T029100", "T015519", "T015518", "T027240", "T015517", "T015516", "7654", "T005119", "T012167", "T016786", "1468315", "2951", "T002207", "T000126", "T023403", "T027247", "T027665", "T027248", "T027245", "T027246", "T027243", "T027244" ] }, "release_date": "2022-02-15T23:00:00.000+00:00", "title": "CVE-2022-25236" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.