CVE-2017-9233

XML External Entity vulnerability in libexpat 2.2.0 and earlier Expat XML Parser Library allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD...

Updated expat packages fix security vulnerabilities

Gustavo Grieco discovered an integer overflow flaw during parsing of XML. An attacker can take advantage of this flaw to cause a denial of service against an application using the Expat library CVE-2016-9063. Rhodri James discovered an infinite loop vulnerability within the entityValueInitProcess...

MGASA-2017-0214 Updated expat packages fix security vulnerabilities

Gustavo Grieco discovered an integer overflow flaw during parsing of XML. An attacker can take advantage of this flaw to cause a denial of service against an application using the Expat library CVE-2016-9063. Rhodri James discovered an infinite loop vulnerability within the entityValueInitProcess...

Ubuntu 14.04 LTS / 16.04 LTS : Expat vulnerability (USN-3356-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3356-1 advisory. It was discovered that Expat incorrectly handled certain external entities. A remote attacker could possibly use this issue to cause Expat to hang,...

USN-3356-2: Expat vulnerability

USN-3356-1 fix a vulnerability in Expat. This update provides the corresponding udpate for Ubuntu 12.04 ESM. Original advisory details: It was discovered that Expat incorrectly handled certain external entities. A remote attacker could possibly use this issue to cause Expat to hang, resulting in ...

USN-3356-1 expat vulnerability

It was discovered that Expat incorrectly handled certain external entities. A remote attacker could possibly use this issue to cause Expat to hang, resulting in a denial of service...

USN-3356-1: Expat vulnerability

It was discovered that Expat incorrectly handled certain external entities. A remote attacker could possibly use this issue to cause Expat to hang, resulting in a denial of service...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : expat (SSA:2017-199-01)

New expat packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-199-01. The tex...

[slackware-security] expat

New expat packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/expat-2.2.2-i586-1slack14.2.txz: Upgraded. Fixes security issues including: External entity infinite lo...

Fedora 26 : expat (2017-18601ad5d2)

https://github.com/libexpat/libexpat/blob/R221/expat/Changes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

PSF-2017-11 Expat 2.2.3

Expat 2.2.2 was released with multiple security fixes: 43: Protect against compilation without any source of high quality entropy enabled, e.g. with CMake build system 60: Windows with UNICODE: Unintended use of LoadLibraryW with a non-wide string resulted in failure to load advapi32.dll and...

[SECURITY] Fedora 26 Update: expat-2.2.1-1.fc26

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

Fedora Update for expat FEDORA-2017-2c5635cd97

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for expat FEDORA-2017-a44f9aa38b

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

expat: Use-of-uninitialized-value in lookup

Project: https://github.com/libexpat/libexpat.git Detailed report: https://oss-fuzz.com/testcase?key=5244538350206976 Project: expat Fuzzer: libFuzzerexpatparseUSASCIIfuzzer Fuzz target binary: parseUSASCIIfuzzer Job Type: libfuzzermsanexpat Platform Id: linux Crash Type: Use-of-uninitialized-val...

Fedora 25 : expat (2017-2c5635cd97)

https://github.com/libexpat/libexpat/blob/R221/expat/Changes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Fedora 24 : expat (2017-a44f9aa38b)

https://github.com/libexpat/libexpat/blob/R221/expat/Changes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

[SECURITY] Fedora 25 Update: expat-2.2.1-1.fc25

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

[SECURITY] Fedora 24 Update: expat-2.2.1-1.fc24

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

Denial Of Service (DoS) Through Infinite Loop

Expat is vulnerable to denial of service DoS attacks. A malicious user can cause the parser to enter an infinite loop by passing an XML document with in it...