| Package | Affected versions | Patched versions |
|---|---|---|
| libexpat | < 2.4.3 | 2.4.3 |
| hci baseboard management controller | = h610c= h610s= h615c | |
| sinema remote connect server | < 3.1 | 3.1 |
| nessus | ≥ 10.0.0, < 10.1.1< 8.15.3 | 10.1.18.15.3 |
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free