lib32-expat: multiple issues

🗓️ 13 Jun 2016 00:00:00Reported by Arch LinuxType

archlinux

archlinux🔗 lists.archlinux.org👁 76 Views

lib32-expat: multiple security issue

Reporter	Title	Published	Views	Family All 274
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Network Time Protocol(NTP) affect WebSphere DataPower XC10 Appliance (CVE-2016-5300, CVE-2015-7704, CVE-2015-8138)	15 Jun 201807:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple expat vulnerabilities	18 Jun 201801:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cracklib, dhcp, expat, libgcrypt and lighttpd affect IBM Flex System Chassis Management Module (CMM)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in expat (CVE-2012-6702 CVE-2016-5300).	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Open Source Expact affect Tivoli Network Manager IP Edition	17 Jun 201815:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Monitoring Basic Services component. (CVE-2012-6702, CVE-2016-5300)	17 Jun 201815:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Denial of Service vulnerabilities with Expat may affect IBM HTTP Server	8 Sep 202200:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Expat affect Intel (R) Manycore Platform Software Stack (MPSS) for Linux and Windows	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Denial of Service vulnerabilities with Expat might affect IBM HTTP Server used with IBM Security Network Protection	16 Jun 201821:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Expat XML Parser vulnerabilities in Prospect	17 Jun 201815:27	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
any	any	any	lib32-expat	2.1.1-3	UNKNOWN

Source	Link
access	www.access.redhat.com/security/cve/CVE-2016-5300
access	www.access.redhat.com/security/cve/CVE-2012-6702

13 Jun 2016 00:00Current

2.3Low risk

Vulners AI Score2.3

EPSS0.0197

lib32-expat multiple issues cve-2012-6702 predictable random numbers xml_parse rand pseudo random generator cve-2016-5300 denial of service entropy hash initialization hash collision unix