Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2019-15903HistorySep 04, 2019 - 6:15 a.m.
CVE-2019-15903
2019-09-0406:15:10
Debian Security Bug Tracker
security-tracker.debian.org
34
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.005
Percentile
75.7%
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | chromium | < 128.0.6613.84-1~deb12u1 | chromium_128.0.6613.84-1~deb12u1_all.deb |
| Debian | 11 | all | chromium | < 120.0.6099.224-1~deb11u1 | chromium_120.0.6099.224-1~deb11u1_all.deb |
| Debian | 999 | all | chromium | < 129.0.6668.89-1 | chromium_129.0.6668.89-1_all.deb |
| Debian | 13 | all | chromium | < 129.0.6668.70-1 | chromium_129.0.6668.70-1_all.deb |
| Debian | 12 | all | expat | < 2.2.7-2 | expat_2.2.7-2_all.deb |
| Debian | 11 | all | expat | < 2.2.7-2 | expat_2.2.7-2_all.deb |
| Debian | 999 | all | expat | < 2.2.7-2 | expat_2.2.7-2_all.deb |
| Debian | 13 | all | expat | < 2.2.7-2 | expat_2.2.7-2_all.deb |
| Debian | 999 | all | firefox | < 70.0-1 | firefox_70.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 68.2.0esr-1 | firefox-esr_68.2.0esr-1_all.deb |
Related
debian
debian
[SECURITY] [DLA 1912-1] expat security update
2019-09-06 14:21:17
[SECURITY] [DSA 4530-1] expat security update
2019-09-22 07:41:45
[SECURITY] [DSA 4530-1] expat security update
2019-09-22 07:41:45
openvas
openvas
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2020-1075)
2020-01-23 00:00:00
Fedora Update for expat FEDORA-2019-9505c6b555
2019-09-26 00:00:00
Fedora Update for expat FEDORA-2019-672ae0f060
2019-10-04 00:00:00
nessus
nessus
Debian DSA-4530-1 : expat - security update
2019-09-23 00:00:00
Fedora 30 : expat (2019-9505c6b555)
2019-09-25 00:00:00
F5 Networks BIG-IP : Expat vulnerability (K05295469)
2022-02-04 00:00:00
nvd
nvd
CVE-2019-15903
2019-09-04 06:15:10
osv
osv
CVE-2019-15903
2019-09-04 06:15:10
expat - security update
2019-09-06 00:00:00
expat - security update
2019-09-22 00:00:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 31 Update: expat-2.2.8-1.fc31
2019-09-21 00:04:26
[SECURITY] Fedora 30 Update: expat-2.2.8-1.fc30
2019-09-25 01:08:45
[SECURITY] Fedora 29 Update: expat-2.2.8-1.fc29
2019-10-02 01:41:36
cvelist
cvelist
CVE-2019-15903
2019-09-04 05:59:16
slackware
slackware
[slackware-security] expat
2019-09-16 21:54:40
[slackware-security] python
2019-10-20 20:16:04
[slackware-security] mozilla-firefox
2019-10-22 19:35:11
cve
cve
CVE-2019-15903
2019-09-04 06:15:10
mageia
mageia
Updated expat packages fix security vulnerability
2019-11-08 02:36:48
Updated firefox packages fix security vulnerabilities
2019-11-08 02:36:48
f5
f5
K34239812 : Libexpat vulnerability CVE-2019-15903
2022-08-05 00:00:00
K05295469 : Expat vulnerability CVE-2019-15903
2022-02-03 00:00:00
suse
suse
Security update for expat (moderate)
2019-09-28 00:00:00
Security update for expat (moderate)
2019-09-28 00:00:00
Recommended update for MozillaThunderbird (important)
2019-11-09 00:00:00
redhatcve
redhatcve
CVE-2019-15903
2019-12-28 03:54:22
freebsd
freebsd
python 3.7 -- multiple vulnerabilities
2019-09-14 00:00:00
cbl_mariner
cbl_mariner
CVE-2019-15903 affecting package expat 2.2.6-4
2022-01-10 03:59:19
ubuntu
ubuntu
Expat vulnerability
2019-09-12 00:00:00
Expat vulnerability
2019-09-12 00:00:00
VTK vulnerabilities
2021-03-15 00:00:00
ubuntucve
ubuntucve
CVE-2019-15903
2019-09-04 00:00:00
prion
prion
Heap overflow
2019-09-04 06:15:00
veracode
veracode
Denial Of Service (Dos)
2019-09-05 06:48:20
symantec
symantec
Libexpat Expat CVE-2019-15903 Heap Buffer Overflow Vulnerability
2019-09-04 00:00:00
alpinelinux
alpinelinux
CVE-2019-15903
2019-09-04 06:15:10
cloudfoundry
cloudfoundry
USN-4132-1: Expat vulnerability | Cloud Foundry
2019-09-30 00:00:00
centos
centos
expat security update
2020-10-20 17:58:03
firefox security update
2019-10-31 14:47:55
thunderbird security update
2019-11-14 01:20:42
almalinux
almalinux
Moderate: expat security update
2020-11-03 12:09:00
amazon
amazon
oraclelinux
oraclelinux
expat security update
2020-10-06 00:00:00
expat security update
2020-11-10 00:00:00
thunderbird security update
2019-10-29 00:00:00
rocky
rocky
expat security update
2020-11-03 12:09:00
altlinux
altlinux
Security fix for the ALT Linux 9 package expat version 2.2.9-alt1
2020-05-31 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 68.2.0-alt1
2019-10-27 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 68.2.2-alt1
2019-11-09 00:00:00
gentoo
gentoo
Expat: Multiple vulnerabilities
2019-11-25 00:00:00
redhat
redhat
(RHSA-2020:4484) Moderate: expat security update
2020-11-03 12:09:00
(RHSA-2020:3952) Moderate: expat security update
2020-09-29 07:46:19
(RHSA-2019:3210) Important: thunderbird security update
2019-10-29 09:12:31
kaspersky
kaspersky
KLA11624 Multiple vulnerabilities in Apple iCloud
2019-12-11 00:00:00
KLA11623 Multiple vulnerabilities in Apple iTunes
2019-12-11 00:00:00
KLA11590 Multiple vulnerabilities in Mozilla Firefox ESR
2019-10-22 00:00:00
apple
apple
About the security content of iCloud for Windows 10.9
2019-12-11 00:00:00
About the security content of iCloud for Windows 7.16
2019-12-11 00:00:00
About the security content of iCloud for Windows 10.9 - Apple Support
2020-04-05 05:12:53
photon
photon
archlinux
archlinux
[ASA-201910-15] thunderbird: multiple issues
2019-10-26 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in - Thunderbird 68.2 — Mozilla
2019-10-22 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.005
Percentile
75.7%
Related for DEBIANCVE:CVE-2019-15903