[UPDATE] [hoch] expat: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-05-28 07:25 UTC
Importiert: 2026-05-29 08:43 UTC
CVSS: 9.8
Quelle-ID: cert_bund
uid_hash: b1f478361a46d30271c1fc2273ed6b9bc8cdd61556a357fc5518de82469e2a4b

CERT-Bund (BSI)

Inhalt

Ein Angreifer kann mehrere Schwachstellen in expat ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2022-25235	CRITICAL	9.8	CRITICAL	9.8			2022-02-16
CVE-2022-25236	CRITICAL	9.8	CRITICAL	9.8			2022-02-16

Externe Referenzen

Bezeichnung	Typ	CVE	Quelle
Oracle Linux Security Advisory ELSA-2022-0845 vom 2022-03-14	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2022-0850 vom 2022-03-14	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2022-0951 vom 2022-03-17	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2022-1069 vom 2022-03-28	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2022-1643 vom 2022-05-02	EXTERNAL	-	wid_csaf
Red Hat Security Advisory RHSA-2022:0815 vom 2022-03-10	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:0816 vom 2022-03-10	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:0817 vom 2022-03-10	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:0818 vom 2022-03-10	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:0824 vom 2022-03-10	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:0843 vom 2022-03-14	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:0845 vom 2022-03-14	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:0847 vom 2022-03-14	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:0850 vom 2022-03-14	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:0853 vom 2022-03-14	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:0951 vom 2022-03-16	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:1012 vom 2022-03-22	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:1053 vom 2022-03-24	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:1068 vom 2022-03-28	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:1069 vom 2022-03-28	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:1070 vom 2022-03-28	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:1263 vom 2022-04-07	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:1309 vom 2022-04-12	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:1476 vom 2022-04-21	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:1539 vom 2022-04-26	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:1540 vom 2022-04-26	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:1622 vom 2022-05-04	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:1643 vom 2022-04-29	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:1644 vom 2022-04-29	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:7143 vom 2022-10-27	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:7144 vom 2022-10-27	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2022:7811 vom 2022-11-08	VENDOR	-	wid_csaf
Amazon Linux Security Advisory ALAS-2022-1764 vom 2022-03-10	EXTERNAL	-	wid_csaf
Amazon Linux Security Advisory ALAS-2022-1795 vom 2022-05-24	EXTERNAL	-	wid_csaf
Amazon Linux Security Advisory ALAS-2022-080 vom 2022-05-20	EXTERNAL	-	wid_csaf
Amazon Linux Security Advisory ALAS-2022-232 vom 2022-12-09	EXTERNAL	-	wid_csaf
Amazon Linux Security Advisory ALAS-2022-1573 vom 2022-03-11	EXTERNAL	-	wid_csaf
Amazon Linux Security Advisory ALAS-2022-1585 vom 2022-05-24	EXTERNAL	-	wid_csaf
AVAYA Security Advisory ASA-2022-031 vom 2022-03-17	EXTERNAL	-	wid_csaf
AVAYA Security Advisory ASA-2022-067 vom 2022-05-16	EXTERNAL	-	wid_csaf
AVAYA Security Advisory ASA-2022-068 vom 2022-05-16	EXTERNAL	-	wid_csaf
OpenBSD 7.0 errata	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2022-6711 vom 2022-10-27	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2022-6997 vom 2022-10-27	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2022-7069 vom 2022-10-27	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2022-9359 vom 2022-05-06	EXTERNAL	-	wid_csaf
Debian Security Advisory DLA-2935 vom 2022-03-07	EXTERNAL	-	wid_csaf
Debian Security Advisory DSA-5085 vom 2022-02-22	EXTERNAL	-	wid_csaf
openSUSE Security Update OPENSUSE-SU-2025:15713-1 vom 2025-11-08	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2022:0844-2 vom 2022-04-20	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2022:2294-1 vom 2022-07-06	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2022:0698-1 vom 2022-03-03	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2022:0713-1 vom 2022-03-04	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2022:14903-1 vom 2022-03-04	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2022:0842-1 vom 2022-03-15	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2022:0844-1 vom 2022-03-15	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2022:14934-1 vom 2022-03-31	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2024:0782-2 vom 2024-04-30	EXTERNAL	-	wid_csaf
National Vulnerability Database vom 2022-02-15	NVD	-	wid_csaf
National Vulnerability Database vom 2022-02-15	NVD	-	wid_csaf
ORACLE OVMSA-2023-0009 vom 2023-08-17	EXTERNAL	-	wid_csaf
Gentoo Linux Security Advisory GLSA-202209-24 vom 2022-09-29	EXTERNAL	-	wid_csaf
NetApp Security Advisory NTAP-20220303-0008 vom 2022-03-03	EXTERNAL	-	wid_csaf
Brocade Security Advisory BSA-2023-1869 vom 2024-04-16	EXTERNAL	-	wid_csaf
Brocade Security Advisory BSA-2023-1868 vom 2024-04-16	EXTERNAL	-	wid_csaf
Broadcom Security Advisory vom 2024-04-30	EXTERNAL	-	wid_csaf
F5 Security Advisory K19473898 vom 2022-04-30	EXTERNAL	-	wid_csaf
HPE Security Bulltein	EXTERNAL	-	wid_csaf
HPE Securi+y Bulletin	EXTERNAL	-	wid_csaf
HPE Security Bulletin vom 2024-04-25	EXTERNAL	-	wid_csaf
Juniper Security Bulletin	EXTERNAL	-	wid_csaf
Juniper Security Bulletin vom 2023-04-13	EXTERNAL	-	wid_csaf
Ubuntu Security Notice USN-5288-1 vom 2022-02-21	EXTERNAL	-	wid_csaf
Ubuntu Security Notice USN-5320-1 vom 2022-03-10	EXTERNAL	-	wid_csaf
Ubuntu Security Notice USN-8235-1 vom 2026-05-07	EXTERNAL	-	wid_csaf
Ubuntu Security Notice USN-8240-1 vom 2026-05-07	EXTERNAL	-	wid_csaf
Ubuntu Security Notice USN-8241-1 vom 2026-05-07	EXTERNAL	-	wid_csaf
Ubuntu Security Notice USN-8313-1 vom 2026-05-27	EXTERNAL	-	wid_csaf
Ubuntu Security Notice USN-8314-1 vom 2026-05-27	EXTERNAL	-	wid_csaf
Ubuntu Security Notice USN-8316-1 vom 2026-05-28	EXTERNAL	-	wid_csaf
Aruba Product Security Advisory ARUBA-PSA-2022-010 vom 2022-06-03	EXTERNAL	-	wid_csaf
Autodesk Security Advisory ADSK-SA-2022-0017 vom 2022-08-02	EXTERNAL	-	wid_csaf
Meinberg Security Advisory MBGSA-2022.01 vom 2022-04-05	EXTERNAL	-	wid_csaf
Tenable Security Advisory	EXTERNAL	-	wid_csaf
Tenable Security Advisory	EXTERNAL	-	wid_csaf
Tenable Security Advisory TNS-2023-19 vom 2023-05-10	EXTERNAL	-	wid_csaf

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
CERT-Bund (BSI)	cert_bund	government_cert		-	de	https://wid.cert-bund.de/content/public/securityAdvisory/rss

Zurueck zur Eintrags-Liste