CVE:CVE-2022-25236
CNNVD:CNNVD-202202-1316
Expat是一款使用C语言编写的快速流式XML解析器。
Expat（又名 libexpat）2.4.5 之前存在输入验证错误漏洞，该漏洞源于 xmlparse.c 允许攻击者将命名空间分隔符插入命名空间 URI。
solution:Upgrade libexpat_project libexpat to a higher version than 2.4.5,and avoid the version (,2.4.5); Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade oracle http_server to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8; Upgrade siemens sinema_remote_connect_server to a higher version than 3.1,and avoid the version (,3.1)