Lucene search
IBME455072BD221DBB8B1C58AAE10839300D4B2DB2A7147F02EDADB4E2016749D64HistoryDec 17, 2019 - 5:30 p.m.
Security Bulletin: IBM API Connect is impacted by a vulnerability in libexpat (CVE-2019-15903)
2019-12-1717:30:16
www.ibm.com
43
EPSS
0.005
Percentile
75.7%
Summary
IBM API Connect has addressed the following vulnerability.
Vulnerability Details
CVEID:CVE-2019-15903
**DESCRIPTION:**In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/166560 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM API Connect | 2018.1-2018.4.1.7 |
Remediation/Fixes
| Affected releases | Fixed in VRMF | APAR | Remediation / First Fix |
|---|---|---|---|
| IBM API Connect V2018.1-2018.4.1.7 |
v2018.4.1.8
|
LI81254
|
Addressed in IBM API Connect v2018.4.1.8.
All components are impacted.
Follow this link and find the OVA package appropriate
form factor for your installation.
Connect&release=2018.4.1.7&platform=All&function=all&source=fc
Workarounds and Mitigations
None
Related
debian
debian
[SECURITY] [DLA 1912-1] expat security update
2019-09-06 14:21:17
[SECURITY] [DSA 4530-1] expat security update
2019-09-22 07:41:45
[SECURITY] [DSA 4530-1] expat security update
2019-09-22 07:41:45
nessus
nessus
Debian DSA-4530-1 : expat - security update
2019-09-23 00:00:00
Fedora 30 : expat (2019-9505c6b555)
2019-09-25 00:00:00
EulerOS Virtualization for ARM 64 3.0.5.0 : expat (EulerOS-SA-2020-1075)
2020-01-13 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2020-1075)
2020-01-23 00:00:00
Ubuntu: Security Advisory (USN-4132-2)
2022-08-26 00:00:00
Fedora Update for expat FEDORA-2019-9505c6b555
2019-09-26 00:00:00
nvd
nvd
CVE-2019-15903
2019-09-04 06:15:10
slackware
slackware
[slackware-security] expat
2019-09-16 21:54:40
[slackware-security] python
2019-10-20 20:16:04
[slackware-security] mozilla-firefox
2019-10-22 19:35:11
mageia
mageia
Updated expat packages fix security vulnerability
2019-11-08 02:36:48
Updated firefox packages fix security vulnerabilities
2019-11-08 02:36:48
osv
osv
CVE-2019-15903
2019-09-04 06:15:10
expat - security update
2019-09-06 00:00:00
expat - security update
2019-09-22 00:00:00
f5
f5
K34239812 : Libexpat vulnerability CVE-2019-15903
2022-08-05 00:00:00
K05295469 : Expat vulnerability CVE-2019-15903
2022-02-03 00:00:00
cvelist
cvelist
CVE-2019-15903
2019-09-04 05:59:16
cve
cve
CVE-2019-15903
2019-09-04 06:15:10
ibm
ibm
fedora
fedora
[SECURITY] Fedora 31 Update: expat-2.2.8-1.fc31
2019-09-21 00:04:26
[SECURITY] Fedora 29 Update: expat-2.2.8-1.fc29
2019-10-02 01:41:36
[SECURITY] Fedora 30 Update: expat-2.2.8-1.fc30
2019-09-25 01:08:45
cbl_mariner
cbl_mariner
CVE-2019-15903 affecting package expat 2.2.6-4
2022-01-10 03:59:19
suse
suse
Security update for expat (moderate)
2019-09-28 00:00:00
Security update for expat (moderate)
2019-09-28 00:00:00
Recommended update for MozillaThunderbird (important)
2019-11-09 00:00:00
ubuntu
ubuntu
Expat vulnerability
2019-09-12 00:00:00
Expat vulnerability
2019-09-12 00:00:00
VTK vulnerabilities
2021-03-15 00:00:00
freebsd
freebsd
python 3.7 -- multiple vulnerabilities
2019-09-14 00:00:00
redhatcve
redhatcve
CVE-2019-15903
2019-12-28 03:54:22
ubuntucve
ubuntucve
CVE-2019-15903
2019-09-04 00:00:00
symantec
symantec
Libexpat Expat CVE-2019-15903 Heap Buffer Overflow Vulnerability
2019-09-04 00:00:00
cloudfoundry
cloudfoundry
USN-4132-1: Expat vulnerability | Cloud Foundry
2019-09-30 00:00:00
veracode
veracode
Denial Of Service (Dos)
2019-09-05 06:48:20
prion
prion
Heap overflow
2019-09-04 06:15:00
alpinelinux
alpinelinux
CVE-2019-15903
2019-09-04 06:15:10
debiancve
debiancve
CVE-2019-15903
2019-09-04 06:15:10
centos
centos
expat security update
2020-10-20 17:58:03
firefox security update
2019-10-31 14:47:55
thunderbird security update
2019-10-31 14:48:49
almalinux
almalinux
Moderate: expat security update
2020-11-03 12:09:00
oraclelinux
oraclelinux
expat security update
2020-10-06 00:00:00
expat security update
2020-11-10 00:00:00
thunderbird security update
2019-10-29 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package expat version 2.2.9-alt1
2020-05-31 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 68.2.0-alt1
2019-10-27 00:00:00
amazon
amazon
rocky
rocky
expat security update
2020-11-03 12:09:00
gentoo
gentoo
Expat: Multiple vulnerabilities
2019-11-25 00:00:00
redhat
redhat
(RHSA-2020:3952) Moderate: expat security update
2020-09-29 07:46:19
(RHSA-2020:4484) Moderate: expat security update
2020-11-03 12:09:00
(RHSA-2019:3210) Important: thunderbird security update
2019-10-29 09:12:31
kaspersky
kaspersky
KLA11624 Multiple vulnerabilities in Apple iCloud
2019-12-11 00:00:00
KLA11623 Multiple vulnerabilities in Apple iTunes
2019-12-11 00:00:00
KLA11590 Multiple vulnerabilities in Mozilla Firefox ESR
2019-10-22 00:00:00
apple
apple
About the security content of iCloud for Windows 10.9
2019-12-11 00:00:00
About the security content of iCloud for Windows 7.16
2019-12-11 00:00:00
About the security content of iCloud for Windows 10.9 - Apple Support
2020-04-05 05:12:53
photon
photon
archlinux
archlinux
[ASA-201910-15] thunderbird: multiple issues
2019-10-26 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in - Thunderbird 68.2 — Mozilla
2019-10-22 00:00:00
Security vulnerabilities fixed in - Firefox ESR 68.2 — Mozilla
2019-10-22 00:00:00
EPSS
0.005
Percentile
75.7%
Related for E455072BD221DBB8B1C58AAE10839300D4B2DB2A7147F02EDADB4E2016749D64