EulerOS Virtualization 3.0.1.0 : expat (EulerOS-SA-2019-1446)

According to the version of the expat packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML tha...

EulerOS Virtualization 2.5.3 : python (EulerOS-SA-2019-1357)

According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to condu...

EulerOS 2.0 SP5 : python (EulerOS-SA-2019-1338)

According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of...

Information Disclosure

Python is an interpreted, interactive, object-oriented programming language. A denial of service flaw was found in the implementation of associative arrays dictionaries in Python. An attacker able to supply a large number of inputs to a Python application such as HTTP POST request parameters sent...

Denial Of Service (DoS)

Expat is a C library written by James Clark for parsing XML documents. A denial of service flaw was found in the implementation of hash arrays in Expat. An attacker could use this flaw to make an application using Expat consume an excessive amount of CPU time by providing a specially-crafted XML...

openSUSE Security Update : python (openSUSE-2019-292)

This update for python fixes the following issues : Security issues fixed : - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser bsc1122191. - CVE-2018-14647: Fixed a denial-of-service vulnerability in Expat bsc1109847. Non-security issue fixed : - Fixed a bug...

SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2019:0482-1)

This update for python fixes the following issues : Security issues fixed : CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser bsc1122191. CVE-2018-14647: Fixed a denial-of-service vulnerability in Expat bsc1109847. Non-security issue fixed: Fixed a bug where...

SUSE-SU-2019:0482-1 Security update for python

This update for python fixes the following issues: Security issues fixed: - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser bsc1122191. - CVE-2018-14647: Fixed a denial-of-service vulnerability in Expat bsc1109847. Non-security issue fixed: - Fixed a bug wher...

Security Bulletin: Vulnerabilities in expat affect IBM Chassis Management Module (CMM)

Summary IBM Chassis Management Module CMM has addressed the following vulnerabilities in expat CVE-2017-9233 CVE-2016-9063 Vulnerability Details Summary IBM Chassis Management Module CMM has addressed the following vulnerabilities in expat CVE-2017-9233 CVE-2016-9063 Vulnerability Details CVEID:...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in expat (CVE-2012-6702 CVE-2016-5300).

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in expat. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in expat. Vulnerability Details CVEID: CVE-2012-6702 Description: Expat, when use...

Security Bulletin: Vulnerabilities in cracklib, dhcp, expat, libgcrypt and lighttpd affect IBM Flex System Chassis Management Module (CMM)

Summary IBM Flex System Chassis Management Module CMM has addressed the following vulnerabilities. Vulnerability Details Summary IBM Flex System Chassis Management Module CMM has addressed the following vulnerabilities. Vulnerability Details: CVEID: CVE-2016-6318 Description: cracklib is vulnerab...

Security Bulletin: Vulnerabilities in Expat affect Intel (R) Manycore Platform Software Stack (MPSS) for Linux and Windows

Summary Intel R Manycore Platform Software Stack MPSS for Linux and Windows have addressed the following vulnerabilities in Expat. Vulnerability Details Summary Intel® Manycore Platform Software Stack MPSS for Linux and Windows have addressed the following vulnerabilities in Expat. Vulnerability...

Denial Of Service (DoS) Or Arbitrary Code Execution

expat is vulnerable to denial of service DoS or arbitrary code execution attacks. When users input malformed document, expat XML parser mishandles the input which causes a buffer overflow during the processing and error reporting. This leading to a denial of service and conceivably result in remo...

Denial Of Service (DoS)

gnome-vfs2 is vulnerable to denial of service DoS attacks. The vulnerability exists as neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted...

Denial Of Service (DoS)

Expat is vulnerable to denial of service. The XML parser xmlparse.c computes hash values without restricting the ability to trigger hash collisions predictably, allowing an attacker to crash the process by submiting a malicious XML file that triggers multiple hash function collisions to consume...

Medium: python34, python36

Issue Overview: Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by contructing an XML document that would cause pathological hash collisions in Expat's internal data...

Amazon Linux 2 : python3 (ALAS-2018-1132)

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by contructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming...

Medium: python3

Issue Overview: Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by contructing an XML document that would cause pathological hash collisions in Expat's internal data...

Denial Of Service (DoS)

libdbus-c++.so is vulnerable to denial of service. The expansion of internal XML entities in the Expat-based XML parser is not disabled and potentially allows a remote attacker to cause a denial of service condition via billion laughs attack...

USN-3817-1: Python vulnerabilities

It was discovered that Python incorrectly handled large amounts of data. A remote attacker could use this issue to cause Python to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2018-1000030 It was...