| Package | Affected versions | Patched versions |
|---|---|---|
| libexpat | < 2.4.4 | 2.4.4 |
| communications metasolv solution | = 6.3.1 | |
| sinema remote connect server | < 3.1 | 3.1 |
| nessus | ≥ 10.0.0, < 10.1.1< 8.15.3 | 10.1.18.15.3 |
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free