Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-3560
HistoryDec 04, 2009 - 9:30 p.m.

CVE-2009-3560

2009-12-0421:30:00
CWE-119
[email protected]
web.nvd.nist.gov
112
cve-2009-3560
expat
denial of service
xml
perl
buffer over-read

6.2 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.5%

JSON

The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.

References

Related

openvas 77
nessus 76
prion 2
f5 2
ubuntu 6
slackware 2
ubuntucve 3
debiancve 2
oraclelinux 1
centos 1
redhat 2
fedora 7
freebsd 3
debian 5
osv 2
seebug 1
veracode 1
httpd 2
cve 1
gentoo 1
altlinux 2
openvas
openvas
Ubuntu Update for python2.4 vulnerabilities USN-890-3
2010-01-25 00:00:00
Mandriva Update for expat MDVSA-2009:316-3 (expat)
2010-01-15 00:00:00
Ubuntu Update for python-xml vulnerabilities USN-890-4
2010-01-29 00:00:00
nessus
nessus
SuSE9 Security Update : xmlrpc-c (YOU Patch Number 12591)
2010-06-22 00:00:00
F5 Networks BIG-IP : Expat vulnerabilities (K15905)
2014-12-15 00:00:00
SuSE9 Security Update : Python (YOU Patch Number 12600)
2010-05-14 00:00:00
prion
prion
Buffer overflow
2009-12-04 21:30:00
Buffer overflow
2009-11-03 16:30:00
f5
f5
K15905 : Expat vulnerabilities CVE-2009-3560 and CVE-2009-3720
2015-03-16 00:00:00
SOL15905 - Expat vulnerabilities CVE-2009-3560 and CVE-2009-3720
2014-12-11 00:00:00
ubuntu
ubuntu
Expat vulnerabilities
2010-01-20 00:00:00
PyXML vulnerabilities
2010-01-26 00:00:00
Python 2.4 vulnerabilities
2010-01-22 00:00:00
slackware
slackware
[slackware-security] expat
2011-02-11 01:17:08
[slackware-security] httpd
2011-02-11 01:17:26
ubuntucve
ubuntucve
CVE-2009-3560
2009-12-04 00:00:00
CVE-2009-3720
2009-11-03 00:00:00
CVE-2009-2625
2009-08-06 00:00:00
debiancve
debiancve
CVE-2009-3560
2009-12-04 21:30:00
CVE-2009-3720
2009-11-03 16:30:00
oraclelinux
oraclelinux
expat security update
2009-12-07 00:00:00
centos
centos
expat security update
2009-12-07 23:34:29
redhat
redhat
(RHSA-2009:1625) Moderate: expat security update
2009-12-07 00:00:00
(RHSA-2017:3239) Important: Red Hat JBoss Enterprise Application Platform 6.4.18 security update
2017-11-16 19:09:33
fedora
fedora
[SECURITY] Fedora 10 Update: expat-2.0.1-8.fc10
2009-12-04 23:57:13
[SECURITY] Fedora 12 Update: expat-2.0.1-8.fc12
2009-12-05 00:06:09
[SECURITY] Fedora 11 Update: expat-2.0.1-8.fc11
2009-12-05 00:02:48
freebsd
freebsd
libwww -- multiple vulnerabilities
2005-10-12 00:00:00
apr -- multiple vunerabilities
2010-10-02 00:00:00
expat2 -- buffer over-read and crash
2009-10-05 00:00:00
debian
debian
[SECURITY] [DSA-1977-1] New python packages fix several vulnerabilities
2010-01-25 22:01:20
[SECURITY] [DSA-1953-1] New expat packages fix denial of service
2009-12-15 20:23:03
[SECURITY] [DSA-1953-2] New expat packages fix regression
2009-12-31 14:15:48
osv
osv
python - several vulnerabilities
2010-01-25 00:00:00
expat - regression fix
2009-12-15 00:00:00
seebug
seebug
expat big2_toUtf8()函数XML文件解析拒绝服务漏洞
2009-12-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-12-06 03:49:03
httpd
httpd
Apache Httpd < 2.2.17 : expat DoS
2009-12-18 00:00:00
Apache Httpd < 2.0.64 : expat DoS
2009-12-18 00:00:00
cve
cve
CVE-2009-3720
2009-11-03 16:30:00
gentoo
gentoo
Expat: Multiple vulnerabilities
2012-09-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package centerim version 4.22.10-alt0.M50P.1
2011-01-13 00:00:00
Security fix for the ALT Linux 5 package centerim version 4.22.10-alt1
2010-11-24 00:00:00

6.2 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.5%

JSON
Related for CVE-2009-3560
openvas77nessus76prion2f52ubuntu6slackware2ubuntucve3debiancve2oraclelinux1centos1redhat2fedora7freebsd3debian5osv2seebug1veracode1httpd2cve1gentoo1altlinux2