Lucene search
IBM8DEC2654592D64F2D867281F416FD4DE6D6CB55A2CF9AFFE8204C63823A299A4HistoryFeb 11, 2020 - 6:49 a.m.
Security Bulletin: Security Vulnerability in Expat affects IBM Netezza Analytics
2020-02-1106:49:33
www.ibm.com
18
EPSS
0.005
Percentile
75.7%
Summary
Expat is used by IBM Netezza Analytics. IBM Netezza Analytics has addressed the applicable CVE.
Vulnerability Details
CVEID:CVE-2019-15903
**DESCRIPTION:**libexpat is vulnerable to a denial of service, caused by a heap-based buffer over-read in XML_GetCurrentLineNumber. By using a specially-crafted XML input, a remote attacker could exploit this vulnerability to cause the application to crash.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/166560 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Netezza Analytics | All IBM Netezza Analytics until version 3.3.5.0 |
Remediation/Fixes
| Product | VRMF | Remediation/ Fix |
|---|---|---|
| IBM Netezza Analytics | 3.3.6.0 | Fix Central Link |
Workarounds and Mitigations
None
Related
debian
debian
[SECURITY] [DLA 1912-1] expat security update
2019-09-06 14:21:17
[SECURITY] [DSA 4530-1] expat security update
2019-09-22 07:41:45
[SECURITY] [DSA 4530-1] expat security update
2019-09-22 07:41:45
openvas
openvas
Ubuntu: Security Advisory (USN-4132-2)
2022-08-26 00:00:00
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2020-1075)
2020-01-23 00:00:00
Fedora Update for expat FEDORA-2019-9505c6b555
2019-09-26 00:00:00
nessus
nessus
Debian DSA-4530-1 : expat - security update
2019-09-23 00:00:00
Fedora 30 : expat (2019-9505c6b555)
2019-09-25 00:00:00
EulerOS Virtualization for ARM 64 3.0.5.0 : expat (EulerOS-SA-2020-1075)
2020-01-13 00:00:00
nvd
nvd
CVE-2019-15903
2019-09-04 06:15:10
mageia
mageia
Updated expat packages fix security vulnerability
2019-11-08 02:36:48
osv
osv
CVE-2019-15903
2019-09-04 06:15:10
expat - security update
2019-09-06 00:00:00
expat - security update
2019-09-22 00:00:00
f5
f5
K34239812 : Libexpat vulnerability CVE-2019-15903
2022-08-05 00:00:00
K05295469 : Expat vulnerability CVE-2019-15903
2022-02-03 00:00:00
cvelist
cvelist
CVE-2019-15903
2019-09-04 05:59:16
cve
cve
CVE-2019-15903
2019-09-04 06:15:10
ibm
ibm
fedora
fedora
[SECURITY] Fedora 31 Update: expat-2.2.8-1.fc31
2019-09-21 00:04:26
[SECURITY] Fedora 30 Update: expat-2.2.8-1.fc30
2019-09-25 01:08:45
[SECURITY] Fedora 29 Update: expat-2.2.8-1.fc29
2019-10-02 01:41:36
slackware
slackware
[slackware-security] expat
2019-09-16 21:54:40
[slackware-security] python
2019-10-20 20:16:04
[slackware-security] mozilla-firefox
2019-10-22 19:35:11
suse
suse
Security update for expat (moderate)
2019-09-28 00:00:00
Security update for expat (moderate)
2019-09-28 00:00:00
Security update for MozillaFirefox, MozillaFirefox-branding-SLE (important)
2019-11-09 00:00:00
freebsd
freebsd
python 3.7 -- multiple vulnerabilities
2019-09-14 00:00:00
redhatcve
redhatcve
CVE-2019-15903
2019-12-28 03:54:22
cbl_mariner
cbl_mariner
CVE-2019-15903 affecting package expat 2.2.6-4
2022-01-10 03:59:19
ubuntu
ubuntu
Expat vulnerability
2019-09-12 00:00:00
Expat vulnerability
2019-09-12 00:00:00
VTK vulnerabilities
2021-03-15 00:00:00
ubuntucve
ubuntucve
CVE-2019-15903
2019-09-04 00:00:00
cloudfoundry
cloudfoundry
USN-4132-1: Expat vulnerability | Cloud Foundry
2019-09-30 00:00:00
prion
prion
Heap overflow
2019-09-04 06:15:00
alpinelinux
alpinelinux
CVE-2019-15903
2019-09-04 06:15:10
veracode
veracode
Denial Of Service (Dos)
2019-09-05 06:48:20
symantec
symantec
Libexpat Expat CVE-2019-15903 Heap Buffer Overflow Vulnerability
2019-09-04 00:00:00
debiancve
debiancve
CVE-2019-15903
2019-09-04 06:15:10
almalinux
almalinux
Moderate: expat security update
2020-11-03 12:09:00
centos
centos
expat security update
2020-10-20 17:58:03
firefox security update
2019-10-31 14:47:55
thunderbird security update
2019-10-31 14:48:49
oraclelinux
oraclelinux
expat security update
2020-10-06 00:00:00
expat security update
2020-11-10 00:00:00
thunderbird security update
2019-10-29 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package expat version 2.2.9-alt1
2020-05-31 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 68.2.0-alt1
2019-10-27 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 68.2.2-alt1
2019-11-09 00:00:00
amazon
amazon
rocky
rocky
expat security update
2020-11-03 12:09:00
redhat
redhat
(RHSA-2020:3952) Moderate: expat security update
2020-09-29 07:46:19
(RHSA-2020:4484) Moderate: expat security update
2020-11-03 12:09:00
gentoo
gentoo
Expat: Multiple vulnerabilities
2019-11-25 00:00:00
kaspersky
kaspersky
KLA11624 Multiple vulnerabilities in Apple iCloud
2019-12-11 00:00:00
KLA11623 Multiple vulnerabilities in Apple iTunes
2019-12-11 00:00:00
KLA11590 Multiple vulnerabilities in Mozilla Firefox ESR
2019-10-22 00:00:00
apple
apple
About the security content of iCloud for Windows 10.9 - Apple Support
2020-04-05 05:12:53
About the security content of iCloud for Windows 10.9
2019-12-11 00:00:00
About the security content of iCloud for Windows 7.16
2019-12-11 00:00:00
photon
photon
archlinux
archlinux
[ASA-201910-15] thunderbird: multiple issues
2019-10-26 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in - Thunderbird 68.2 — Mozilla
2019-10-22 00:00:00
Security vulnerabilities fixed in - Firefox ESR 68.2 — Mozilla
2019-10-22 00:00:00
EPSS
0.005
Percentile
75.7%
Related for 8DEC2654592D64F2D867281F416FD4DE6D6CB55A2CF9AFFE8204C63823A299A4