CVE-2021-45960 is a critical vulnerability in Expat (libexpat) versions prior to 2.4.3, affecting products from vendors like Debian, NetApp, Siemens, and Tenable. This flaw, specifically a left shift by 29 or more in the storeAtts function, can lead to memory allocation issues such as insufficient byte allocation or improper memory freeing. With a CVSS score of 8.8 (High), it presents a severe risk, allowing an unauthenticated attacker to achieve high confidentiality, integrity, and availability impacts with low attack complexity. While there is no evidence of active exploitation (KEV: No) and no public exploit code (Metasploit, Nuclei, ExploitDB: None), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.4.3CPE matchmatch criteria | cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:* | ||
< 8.15.3CPE matchmatch criteria | cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:* | ||
>= 10.0.0, < 10.1.1CPE matchmatch criteria | cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:* | ||
10.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | ||
11.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Multiple ctrlX CORE vulnerabilities
Apr 20, 2022Multiple ctrlX CORE vulnerabilities
Apr 20, 2022Multiple ctrlX CORE vulnerabilities
Apr 20, 2022Multiple ctrlX CORE vulnerabilities
Apr 20, 2022Multiple ctrlX CORE vulnerabilities
Apr 20, 2022Multiple ctrlX CORE vulnerabilities
Apr 20, 2022expat: Large number of prefixed XML attributes on a single tag can crash libexpat
Jan 17, 2022In Expat (aka libexpat) before 2.4.3 a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g. allocating too few bytes or only freeing memory).
Jan 11, 2022