CVE:CVE-2021-46143
CNNVD:CNNVD-202201-417
Expat是一款使用C语言编写的快速流式XML解析器。
Expat 存在安全漏洞，该漏洞源于在2.4.3之前Expat(又名libexpat)的xmlparse.c中的doProlog，m个groupSize存在一个整数溢出。
solution:Upgrade libexpat_project libexpat to a higher version than 2.4.3,and avoid the version (,2.4.3); Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp hci_baseboard_management_controller to a higher version than h610c,h610s,h615c,and avoid the version h610c,h610s,h615c; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade tenable nessus to a higher version than 8.15.3,10.1.1,and avoid the version (,8.15.3),[10.0.0,10.1.1); Upgrade siemens sinema_remote_connect_server to a higher version than 3.1,and avoid the version (,3.1)