CVE:CVE-2021-45960
CNNVD:CNNVD-202201-037
Expat是一款使用C语言编写的快速流式XML解析器。
Expat 存在安全漏洞，该漏洞源于在2.4.3之前的Expat(又名libexpat)中，xmlparse.c中的storeAtts函数左移29(或更多)位可能会导致realloc错误行为(例如，分配的字节太少，或只释放内存)。
solution:Upgrade libexpat_project libexpat to a higher version than 2.4.3,and avoid the version (,2.4.3); Upgrade tenable nessus to a higher version than 8.15.3,10.1.1,and avoid the version (,8.15.3),[10.0.0,10.1.1); Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade siemens sinema_remote_connect_server to a higher version than 3.1,and avoid the version (,3.1); Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp hci_baseboard_management_controller to a higher version than h610c,h610s,h615c,and avoid the version h610c,h610s,h615c; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -