Lucene search
IBMBEC896DB9F018B1BCEE2BF9A76C241561F1A1E19105EBD0BF2C340BF4BD503B2HistoryMar 23, 2020 - 12:37 p.m.
Security Bulletin: A security vulnerability has been disclosed in Expat, which is installed as part of IBM Tivoli Network Manager (CVE-2019-15903).
2020-03-2312:37:53
www.ibm.com
19
EPSS
0.005
Percentile
75.7%
Summary
A security vulnerability has been disclosed in the Expat library libexpat, which is installed as part of IBM Tivoli Network Manager version 4.2. Information about this vulnerability has been published in a security bulletin.
Vulnerability Details
CVEID:CVE-2019-15903
**DESCRIPTION:**libexpat is vulnerable to a denial of service, caused by a heap-based buffer over-read in XML_GetCurrentLineNumber. By using a specially-crafted XML input, a remote attacker could exploit this vulnerability to cause the application to crash.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/166560 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| ITNM | 4.2.0.x |
Remediation/Fixes
| Affected Product(s) | Version(s) | Remediation |
|---|---|---|
| ITNM | 4.2.0.x | Upgrade to ITNM 4.2 Fix Pack 9 (4.2.0.9), as per: |
Download IBM Tivoli Network Manager 4.2 Fix Pack 9
Workarounds and Mitigations
None
Related
debian
debian
[SECURITY] [DLA 1912-1] expat security update
2019-09-06 14:21:17
[SECURITY] [DSA 4530-1] expat security update
2019-09-22 07:41:45
[SECURITY] [DSA 4530-1] expat security update
2019-09-22 07:41:45
openvas
openvas
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2020-1075)
2020-01-23 00:00:00
Fedora Update for expat FEDORA-2019-9505c6b555
2019-09-26 00:00:00
Fedora Update for expat FEDORA-2019-672ae0f060
2019-10-04 00:00:00
nessus
nessus
Debian DSA-4530-1 : expat - security update
2019-09-23 00:00:00
Fedora 30 : expat (2019-9505c6b555)
2019-09-25 00:00:00
F5 Networks BIG-IP : Expat vulnerability (K05295469)
2022-02-04 00:00:00
nvd
nvd
CVE-2019-15903
2019-09-04 06:15:10
osv
osv
CVE-2019-15903
2019-09-04 06:15:10
expat - security update
2019-09-06 00:00:00
expat - security update
2019-09-22 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: expat-2.2.8-1.fc31
2019-09-21 00:04:26
[SECURITY] Fedora 30 Update: expat-2.2.8-1.fc30
2019-09-25 01:08:45
[SECURITY] Fedora 29 Update: expat-2.2.8-1.fc29
2019-10-02 01:41:36
cvelist
cvelist
CVE-2019-15903
2019-09-04 05:59:16
slackware
slackware
[slackware-security] expat
2019-09-16 21:54:40
[slackware-security] python
2019-10-20 20:16:04
[slackware-security] mozilla-firefox
2019-10-22 19:35:11
cve
cve
CVE-2019-15903
2019-09-04 06:15:10
mageia
mageia
Updated expat packages fix security vulnerability
2019-11-08 02:36:48
Updated thunderbird packages fix security vulnerabilities
2019-11-08 02:36:48
f5
f5
K34239812 : Libexpat vulnerability CVE-2019-15903
2022-08-05 00:00:00
K05295469 : Expat vulnerability CVE-2019-15903
2022-02-03 00:00:00
ibm
ibm
suse
suse
Security update for expat (moderate)
2019-09-28 00:00:00
Security update for expat (moderate)
2019-09-28 00:00:00
Security update for MozillaFirefox, MozillaFirefox-branding-SLE (important)
2019-11-09 00:00:00
redhatcve
redhatcve
CVE-2019-15903
2019-12-28 03:54:22
freebsd
freebsd
python 3.7 -- multiple vulnerabilities
2019-09-14 00:00:00
cbl_mariner
cbl_mariner
CVE-2019-15903 affecting package expat 2.2.6-4
2022-01-10 03:59:19
ubuntu
ubuntu
Expat vulnerability
2019-09-12 00:00:00
Expat vulnerability
2019-09-12 00:00:00
VTK vulnerabilities
2021-03-15 00:00:00
ubuntucve
ubuntucve
CVE-2019-15903
2019-09-04 00:00:00
prion
prion
Heap overflow
2019-09-04 06:15:00
veracode
veracode
Denial Of Service (Dos)
2019-09-05 06:48:20
symantec
symantec
Libexpat Expat CVE-2019-15903 Heap Buffer Overflow Vulnerability
2019-09-04 00:00:00
alpinelinux
alpinelinux
CVE-2019-15903
2019-09-04 06:15:10
cloudfoundry
cloudfoundry
USN-4132-1: Expat vulnerability | Cloud Foundry
2019-09-30 00:00:00
debiancve
debiancve
CVE-2019-15903
2019-09-04 06:15:10
centos
centos
expat security update
2020-10-20 17:58:03
firefox security update
2019-10-31 14:47:55
thunderbird security update
2019-11-14 01:20:42
almalinux
almalinux
Moderate: expat security update
2020-11-03 12:09:00
oraclelinux
oraclelinux
expat security update
2020-10-06 00:00:00
expat security update
2020-11-10 00:00:00
thunderbird security update
2019-10-29 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package expat version 2.2.9-alt1
2020-05-31 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 68.2.0-alt1
2019-10-27 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 68.2.2-alt1
2019-11-09 00:00:00
rocky
rocky
expat security update
2020-11-03 12:09:00
amazon
amazon
redhat
redhat
(RHSA-2020:4484) Moderate: expat security update
2020-11-03 12:09:00
(RHSA-2020:3952) Moderate: expat security update
2020-09-29 07:46:19
(RHSA-2019:3210) Important: thunderbird security update
2019-10-29 09:12:31
gentoo
gentoo
Expat: Multiple vulnerabilities
2019-11-25 00:00:00
kaspersky
kaspersky
KLA11624 Multiple vulnerabilities in Apple iCloud
2019-12-11 00:00:00
KLA11623 Multiple vulnerabilities in Apple iTunes
2019-12-11 00:00:00
KLA11590 Multiple vulnerabilities in Mozilla Firefox ESR
2019-10-22 00:00:00
apple
apple
About the security content of iCloud for Windows 10.9
2019-12-11 00:00:00
About the security content of iCloud for Windows 7.16
2019-12-11 00:00:00
About the security content of iCloud for Windows 10.9 - Apple Support
2020-04-05 05:12:53
photon
photon
archlinux
archlinux
[ASA-201910-15] thunderbird: multiple issues
2019-10-26 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in - Thunderbird 68.2 — Mozilla
2019-10-22 00:00:00
Security vulnerabilities fixed in - Firefox ESR 68.2 — Mozilla
2019-10-22 00:00:00
EPSS
0.005
Percentile
75.7%
Related for BEC896DB9F018B1BCEE2BF9A76C241561F1A1E19105EBD0BF2C340BF4BD503B2