Lucene search
AmazonALAS-2020-1364HistoryMay 11, 2020 - 8:41 p.m.
Medium: expat
2020-05-1120:41:00
alas.aws.amazon.com
58
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.033 Low
EPSS
Percentile
91.2%
Issue Overview:
Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283. (CVE-2015-2716)
Affected Packages:
expat
Issue Correction:
Run yum update expat to update your system.
New Packages:
i686:
expat-2.1.0-11.22.amzn1.i686
expat-devel-2.1.0-11.22.amzn1.i686
expat-debuginfo-2.1.0-11.22.amzn1.i686
src:
expat-2.1.0-11.22.amzn1.src
x86_64:
expat-debuginfo-2.1.0-11.22.amzn1.x86_64
expat-devel-2.1.0-11.22.amzn1.x86_64
expat-2.1.0-11.22.amzn1.x86_64
Additional References
Red Hat: CVE-2015-2716
Mitre: CVE-2015-2716
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | expat | < 2.1.0-11.22.amzn1 | expat-2.1.0-11.22.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | expat-devel | < 2.1.0-11.22.amzn1 | expat-devel-2.1.0-11.22.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | expat-debuginfo | < 2.1.0-11.22.amzn1 | expat-debuginfo-2.1.0-11.22.amzn1.i686.rpm |
| Amazon Linux | 1 | x86_64 | expat-debuginfo | < 2.1.0-11.22.amzn1 | expat-debuginfo-2.1.0-11.22.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | expat-devel | < 2.1.0-11.22.amzn1 | expat-devel-2.1.0-11.22.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | expat | < 2.1.0-11.22.amzn1 | expat-2.1.0-11.22.amzn1.x86_64.rpm |
Related
prion
prion
Buffer overflow
2015-05-14 10:59:00
Integer overflow
2015-07-23 00:59:00
Buffer overflow
2016-06-30 17:59:00
ibm
ibm
debiancve
debiancve
CVE-2015-1283
2015-07-23 00:59:00
CVE-2016-4472
2016-06-30 17:59:00
ubuntucve
ubuntucve
f5
f5
K50459349 : Expat XML library vulnerability CVE-2015-2716
2017-02-10 00:00:00
K15104541 : Expat XML library vulnerability CVE-2015-1283
2016-10-11 00:00:00
SOL22232964 - Expat XML library vulnerability CVE-2016-4472
2016-10-21 00:00:00
veracode
veracode
Denial Of Service (DoS)
2017-02-01 05:26:42
Denial Of Service (DoS)
2017-03-27 05:30:04
Arbitrary Code Execution
2019-05-02 05:39:09
nessus
nessus
NewStart CGSL CORE 5.05 / MAIN 5.05 : expat Vulnerability (NS-SA-2020-0116)
2020-12-09 00:00:00
RHEL 7 : expat (RHSA-2020:1011)
2020-04-01 00:00:00
RHEL 7 : expat (RHSA-2020:2508)
2020-06-17 00:00:00
cve
cve
openvas
openvas
Debian: Security Advisory (DLA-281-1)
2023-03-08 00:00:00
Python < 2.7.12, 3.3.x < 3.3.7, 3.4.x < 3.4.5, 3.5.x < 3.5.2 Expat 2.1.1 (bpo-26556) - Linux
2021-11-01 00:00:00
Huawei EulerOS: Security Advisory for apr-util (EulerOS-SA-2020-1639)
2020-06-16 00:00:00
debian
debian
[SECURITY] [DLA 281-1] expat security update
2015-07-25 14:17:27
[SECURITY] [DSA 3318-1] expat security update
2015-07-26 17:54:13
[SECURITY] [DSA 3582-1] expat security update
2016-05-18 05:18:57
archlinux
archlinux
expat: arbitrary code execution
2016-03-24 00:00:00
expat: arbitrary code execution
2016-05-18 00:00:00
lib32-expat: arbitrary code execution
2016-05-18 00:00:00
alpinelinux
alpinelinux
CVE-2016-4472
2016-06-30 17:59:00
freebsd
freebsd
expat2 -- denial of service
2016-06-09 00:00:00
FreeBSD -- Multiple integer overflows in expat (libbsdxml) XML parser
2015-08-18 00:00:00
osv
osv
CVE-2016-4472
2016-06-30 17:59:00
expat - security update
2015-07-25 00:00:00
expat - security update
2015-07-26 00:00:00
redhatcve
redhatcve
CVE-2016-4472
2016-06-09 09:48:44
oraclelinux
oraclelinux
expat security update
2020-04-06 00:00:00
thunderbird security update
2015-05-19 00:00:00
firefox security update
2015-05-13 00:00:00
mozilla
mozilla
Buffer overflow when parsing compressed XML — Mozilla
2015-05-12 00:00:00
centos
centos
expat security update
2020-04-08 17:58:10
thunderbird security update
2015-05-18 14:07:12
firefox security update
2015-05-13 00:01:13
redhat
redhat
(RHSA-2020:2508) Moderate: expat security update
2020-06-10 16:46:54
(RHSA-2020:1011) Moderate: expat security update
2020-03-31 09:08:15
(RHSA-2015:1012) Important: thunderbird security update
2015-05-18 00:00:00
mageia
mageia
Updated expat package fixes security vulnerability
2015-07-27 20:18:02
securityvulns
securityvulns
[SECURITY] [DSA 3318-1] expat security update
2015-08-03 00:00:00
expat library integer overflow
2015-08-03 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:20.expat
2015-08-18 00:00:00
ubuntu
ubuntu
Expat vulnerability
2015-08-31 00:00:00
VNC4 vulnerabilities
2021-03-15 00:00:00
Thunderbird vulnerabilities
2015-05-18 00:00:00
slackware
slackware
[slackware-security] expat
2016-12-24 19:24:21
suse
suse
Security update for expat (important)
2016-06-07 13:08:02
Security update for expat (important)
2016-06-08 12:07:50
Security update for expat (important)
2016-05-30 14:09:21
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.033 Low
EPSS
Percentile
91.2%
Related for ALAS-2020-1364