CVE-2021-45960: debian debian_linux Incorrect Calculation

Modified

AliasesALPINE-CVE-2021-45960UBUNTU-CVE-2021-45960DEBIAN-CVE-2021-45960

Published 01-01-2022Last modified 14-10-2026

Vulnerability summary

CVE-2021-45960 is a high (CVSS 9.0) Incorrect Calculation vulnerability in debian debian_linux. EPSS estimates a 4.67% chance of exploitation in the next 30 days, higher than 91.7% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Prioritisepublic exploit

Public exploit (GitHub, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

9.0/10

010

High · v2.0 (NVD)

EPSS score

4.67%

0%100%

Low · +0.44 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2github, reference

Advisory lineage

Upstream 0 · Downstream 13 · Related 6

DLA-2904-1 DSA-5073-1 MGASA-2022-0031 OPENSUSE-SU-2022:0178-1 OPENSUSE-SU-2024:11762-1 RHSA-2022:0951+7 more

Timeline

01-01-2022
PublishedVulnerability first disclosed.
14-10-2026
Last modifiedVulnerability information updated.

Description

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).

CVSS metrics

6 scores · 5 sources · 2 versions

v3.18.8v2.09.0

EPSS trend

Probability

4.67%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

Increase +0.44 pp

From 4.23% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

githubUnverified
Libexpat
Maturity: poc
referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-682Incorrect CalculationThe product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

Affected systems

Version check

Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu15 products

ayttmAll versions (No fix recorded)
cableswigAll versions (No fix recorded)
cadaverAll versions (No fix recorded)
coin3All versions (No fix recorded)
expat< 2.1.0-4ubuntu1.4+esm4 | < 2.1.0-7ubuntu0.16.04.5+esm2 | < 2.2.5-3ubuntu0.4 | < 2.2.9-1ubuntu0.2 | < 2.4.3-1

Show all 15

Netapp4 products

active_iq_unified_managerna
hci_baseboard_management_controllerh610c | h610s | h615c
oncommand_workflow_automationna
solidfire_\&_hci_management_nodena

Debian3 products

expat< 2.4.3-1
libxmltokAll versions (No fix recorded)
debian_linuxEOL10.0 | 11.0

Alpine1 product

expat< 2.2.10-r0 | < 2.2.10-r2 | < 2.4.3-r0

Libexpat_project1 product

libexpat< 2.4.3

Siemens1 product

sinema_remote_connect_server< 3.1

Tenable1 product

nessus< 8.15.3 | ≥ 10.0.0, < 10.1.1

7 vendors · 26 products

References

18 links

github.com/libexpat/libexpat/issues/531X Refsource MISCExploitIssue TrackingPatchThird Party Advisory
github.com/libexpat/libexpat/pull/534X Refsource MISCPatchThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=1217609X Refsource MISCIssue TrackingPermissions RequiredThird Party Advisory
www.openwall.com/lists/oss-security/2022/01/17/3Mailing ListX Refsource MLISTExploitThird Party Advisory
security.netapp.com/advisory/ntap-20220121-0004/X Refsource CONFIRMThird Party Advisory
www.tenable.com/security/tns-2022-05X Refsource CONFIRMThird Party Advisory
www.debian.org/security/2022/dsa-5073Vendor AdvisoryX Refsource DEBIANIssue TrackingThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-484086.pdfX Refsource CONFIRMPatchThird Party Advisory
security.gentoo.org/glsa/202209-24Vendor AdvisoryX Refsource GENTOOThird Party Advisory
security.alpinelinux.org/vuln/CVE-2021-45960Advisory

Show all 18 references