Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-44641

In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLRPC requests that cause a recursive XML entity expansion, leading to excessive use of memory on the server and a Denial of Service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.6%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2022-44641
  • Linaro » Lava » Version: 2013.12
    cpe:2.3:a:linaro:lava:2013.12
  • Linaro » Lava » Version: 2013.12.1
    cpe:2.3:a:linaro:lava:2013.12.1
  • Linaro » Lava » Version: 2014.01
    cpe:2.3:a:linaro:lava:2014.01
  • Linaro » Lava » Version: 2014.02
    cpe:2.3:a:linaro:lava:2014.02
  • Linaro » Lava » Version: 2014.03
    cpe:2.3:a:linaro:lava:2014.03
  • Linaro » Lava » Version: 2014.04
    cpe:2.3:a:linaro:lava:2014.04
  • Linaro » Lava » Version: 2014.05
    cpe:2.3:a:linaro:lava:2014.05
  • Linaro » Lava » Version: 2014.06
    cpe:2.3:a:linaro:lava:2014.06
  • Linaro » Lava » Version: 2014.06.22
    cpe:2.3:a:linaro:lava:2014.06.22
  • Linaro » Lava » Version: 2014.06.24
    cpe:2.3:a:linaro:lava:2014.06.24
  • Linaro » Lava » Version: 2014.07
    cpe:2.3:a:linaro:lava:2014.07
  • Linaro » Lava » Version: 2014.07.1
    cpe:2.3:a:linaro:lava:2014.07.1
  • Linaro » Lava » Version: 2014.08
    cpe:2.3:a:linaro:lava:2014.08
  • Linaro » Lava » Version: 2014.08.1
    cpe:2.3:a:linaro:lava:2014.08.1
  • Linaro » Lava » Version: 2014.08.2
    cpe:2.3:a:linaro:lava:2014.08.2
  • Linaro » Lava » Version: 2014.09
    cpe:2.3:a:linaro:lava:2014.09
  • Linaro » Lava » Version: 2014.09.1
    cpe:2.3:a:linaro:lava:2014.09.1
  • Linaro » Lava » Version: 2014.12
    cpe:2.3:a:linaro:lava:2014.12
  • Linaro » Lava » Version: 2015.01
    cpe:2.3:a:linaro:lava:2015.01
  • Linaro » Lava » Version: 2015.03
    cpe:2.3:a:linaro:lava:2015.03
  • Linaro » Lava » Version: 2015.03.1
    cpe:2.3:a:linaro:lava:2015.03.1
  • Linaro » Lava » Version: 2015.04
    cpe:2.3:a:linaro:lava:2015.04
  • Linaro » Lava » Version: 2015.04.1
    cpe:2.3:a:linaro:lava:2015.04.1
  • Linaro » Lava » Version: 2015.05
    cpe:2.3:a:linaro:lava:2015.05
  • Linaro » Lava » Version: 2015.06
    cpe:2.3:a:linaro:lava:2015.06
  • Linaro » Lava » Version: 2015.07
    cpe:2.3:a:linaro:lava:2015.07
  • Linaro » Lava » Version: 2015.11
    cpe:2.3:a:linaro:lava:2015.11
  • Linaro » Lava » Version: 2015.12
    cpe:2.3:a:linaro:lava:2015.12
  • Linaro » Lava » Version: 2015.8
    cpe:2.3:a:linaro:lava:2015.8
  • Linaro » Lava » Version: 2015.8.1
    cpe:2.3:a:linaro:lava:2015.8.1
  • Linaro » Lava » Version: 2015.9
    cpe:2.3:a:linaro:lava:2015.9
  • Linaro » Lava » Version: 2016.11
    cpe:2.3:a:linaro:lava:2016.11
  • Linaro » Lava » Version: 2016.12
    cpe:2.3:a:linaro:lava:2016.12
  • Linaro » Lava » Version: 2016.2
    cpe:2.3:a:linaro:lava:2016.2
  • Linaro » Lava » Version: 2016.3
    cpe:2.3:a:linaro:lava:2016.3
  • Linaro » Lava » Version: 2016.4
    cpe:2.3:a:linaro:lava:2016.4
  • Linaro » Lava » Version: 2016.6
    cpe:2.3:a:linaro:lava:2016.6
  • Linaro » Lava » Version: 2016.8
    cpe:2.3:a:linaro:lava:2016.8
  • Linaro » Lava » Version: 2016.9
    cpe:2.3:a:linaro:lava:2016.9
  • Linaro » Lava » Version: 2017.1
    cpe:2.3:a:linaro:lava:2017.1
  • Linaro » Lava » Version: 2017.10
    cpe:2.3:a:linaro:lava:2017.10
  • Linaro » Lava » Version: 2017.11
    cpe:2.3:a:linaro:lava:2017.11
  • Linaro » Lava » Version: 2017.12
    cpe:2.3:a:linaro:lava:2017.12
  • Linaro » Lava » Version: 2017.2
    cpe:2.3:a:linaro:lava:2017.2
  • Linaro » Lava » Version: 2017.4
    cpe:2.3:a:linaro:lava:2017.4
  • Linaro » Lava » Version: 2017.5
    cpe:2.3:a:linaro:lava:2017.5
  • Linaro » Lava » Version: 2017.6
    cpe:2.3:a:linaro:lava:2017.6
  • Linaro » Lava » Version: 2017.7
    cpe:2.3:a:linaro:lava:2017.7
  • Linaro » Lava » Version: 2017.9
    cpe:2.3:a:linaro:lava:2017.9
  • Linaro » Lava » Version: 2018.1
    cpe:2.3:a:linaro:lava:2018.1
  • Linaro » Lava » Version: 2018.11
    cpe:2.3:a:linaro:lava:2018.11
  • Linaro » Lava » Version: 2018.2
    cpe:2.3:a:linaro:lava:2018.2
  • Linaro » Lava » Version: 2018.4
    cpe:2.3:a:linaro:lava:2018.4
  • Linaro » Lava » Version: 2018.5
    cpe:2.3:a:linaro:lava:2018.5
  • Linaro » Lava » Version: 2019.01
    cpe:2.3:a:linaro:lava:2019.01
  • Linaro » Lava » Version: 2019.03
    cpe:2.3:a:linaro:lava:2019.03
  • Linaro » Lava » Version: 2019.04
    cpe:2.3:a:linaro:lava:2019.04
  • Linaro » Lava » Version: 2019.05
    cpe:2.3:a:linaro:lava:2019.05
  • Linaro » Lava » Version: 2019.06
    cpe:2.3:a:linaro:lava:2019.06
  • Linaro » Lava » Version: 2019.07
    cpe:2.3:a:linaro:lava:2019.07
  • Linaro » Lava » Version: 2019.08
    cpe:2.3:a:linaro:lava:2019.08
  • Linaro » Lava » Version: 2019.09
    cpe:2.3:a:linaro:lava:2019.09
  • Linaro » Lava » Version: 2019.10
    cpe:2.3:a:linaro:lava:2019.10
  • Linaro » Lava » Version: 2019.11
    cpe:2.3:a:linaro:lava:2019.11
  • Linaro » Lava » Version: 2019.12
    cpe:2.3:a:linaro:lava:2019.12
  • Linaro » Lava » Version: 2020.01
    cpe:2.3:a:linaro:lava:2020.01
  • Linaro » Lava » Version: 2020.02
    cpe:2.3:a:linaro:lava:2020.02
  • Linaro » Lava » Version: 2020.04
    cpe:2.3:a:linaro:lava:2020.04
  • Linaro » Lava » Version: 2020.05
    cpe:2.3:a:linaro:lava:2020.05
  • Linaro » Lava » Version: 2020.06
    cpe:2.3:a:linaro:lava:2020.06
  • Linaro » Lava » Version: 2020.07
    cpe:2.3:a:linaro:lava:2020.07
  • Linaro » Lava » Version: 2020.08
    cpe:2.3:a:linaro:lava:2020.08
  • Linaro » Lava » Version: 2020.09
    cpe:2.3:a:linaro:lava:2020.09
  • Linaro » Lava » Version: 2020.10
    cpe:2.3:a:linaro:lava:2020.10
  • Linaro » Lava » Version: 2020.12
    cpe:2.3:a:linaro:lava:2020.12
  • Linaro » Lava » Version: 2021.01
    cpe:2.3:a:linaro:lava:2021.01
  • Linaro » Lava » Version: 2021.03
    cpe:2.3:a:linaro:lava:2021.03
  • Linaro » Lava » Version: 2021.04
    cpe:2.3:a:linaro:lava:2021.04
  • Linaro » Lava » Version: 2021.05
    cpe:2.3:a:linaro:lava:2021.05
  • Linaro » Lava » Version: 2021.08
    cpe:2.3:a:linaro:lava:2021.08
  • Linaro » Lava » Version: 2021.09
    cpe:2.3:a:linaro:lava:2021.09
  • Linaro » Lava » Version: 2021.10
    cpe:2.3:a:linaro:lava:2021.10
  • Linaro » Lava » Version: 2021.11
    cpe:2.3:a:linaro:lava:2021.11
  • Linaro » Lava » Version: 2022.01
    cpe:2.3:a:linaro:lava:2022.01
  • Linaro » Lava » Version: 2022.01.1
    cpe:2.3:a:linaro:lava:2022.01.1
  • Linaro » Lava » Version: 2022.01.2
    cpe:2.3:a:linaro:lava:2022.01.2
  • Linaro » Lava » Version: 2022.01.3
    cpe:2.3:a:linaro:lava:2022.01.3
  • Linaro » Lava » Version: 2022.02
    cpe:2.3:a:linaro:lava:2022.02
  • Linaro » Lava » Version: 2022.03
    cpe:2.3:a:linaro:lava:2022.03
  • Linaro » Lava » Version: 2022.04
    cpe:2.3:a:linaro:lava:2022.04
  • Linaro » Lava » Version: 2022.05
    cpe:2.3:a:linaro:lava:2022.05
  • Linaro » Lava » Version: 2022.06
    cpe:2.3:a:linaro:lava:2022.06
  • Linaro » Lava » Version: 2022.08
    cpe:2.3:a:linaro:lava:2022.08
  • Linaro » Lava » Version: 2022.10
    cpe:2.3:a:linaro:lava:2022.10
  • Debian » Debian Linux » Version: 10.0
    cpe:2.3:o:debian:debian_linux:10.0
  • Debian » Debian Linux » Version: 11.0
    cpe:2.3:o:debian:debian_linux:11.0


Contact Us

Shodan ® - All rights reserved