USN-5288-1: Expat vulnerabilities
Published Feb 21, 2022
·Updated
It was discovered that Expat incorrectly handled certain files. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
Affected Software
1 affected component
Ubuntu Expat
Event History
May 10, 2025
Advisory Published
via Ubuntu·03:48 AM
Data Sourced
via Ubuntu·03:48 AM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
What is the vulnerability ID of this security advisory?
USN-5288-1
2
What is the title of this security advisory?
Expat vulnerabilities
3
What is the description of the vulnerability?
The Expat library incorrectly handles certain files, which could allow an attacker to cause a crash or execute arbitrary code.
4
Which software is affected by this vulnerability?
The vulnerabilities affect Ubuntu 21.10, 20.04, 18.04, 16.04, and 14.04 versions of the libexpat1 and lib64expat1 packages.
5
Where can I find more information about the vulnerabilities?
You can find more information about the vulnerabilities in the Ubuntu security advisories: [CVE-2022-22823](https://ubuntu.com/security/CVE-2022-22823), [CVE-2021-45960](https://ubuntu.com/security/CVE-2021-45960), [CVE-2022-25235](https://ubuntu.com/security/CVE-2022-25235).