PatchTheCVEezxml vulnerabilities and fixes
Recent CVEs affecting ezxml, with upgrade or downgrade steps. 8 tracked.
ezxml has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-05-17. Highest priority: CVE-2021-31598 (score 54/100).
- CVE-2022-30045 MEDIUM 6.5 DOWNGRADE An issue was discovered in libezxml.a in ezXML 0.8.6
- CVE-2021-31598 HIGH 7.5 DOWNGRADE MITIGATE An issue was discovered in libezxml.a in ezXML 0.8.6
- CVE-2021-31348 MEDIUM 6.5 DOWNGRADE MITIGATE An issue was discovered in libezxml.a in ezXML 0.8.6
- CVE-2021-31347 MEDIUM 6.5 DOWNGRADE MITIGATE An issue was discovered in libezxml.a in ezXML 0.8.6
- CVE-2021-31229 MEDIUM 6.5 DOWNGRADE MITIGATE An issue was discovered in libezxml.a in ezXML 0.8.6
- CVE-2021-26222 HIGH 8.1 UPGRADE The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhau
- CVE-2021-26221 HIGH 8.1 UPGRADE The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhau
- CVE-2021-26220 HIGH 8.1 UPGRADE The ezxml_toxml function in ezxml 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exh
FAQ
How do I fix ezxml vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ezxml being exploited right now?
None of the tracked ezxml CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ezxml CVE should I patch first?
CVE-2021-31598 currently ranks highest (54/100): An issue was discovered in libezxml.a in ezXML 0.8.6.