SUSE SLES11 Security Update : expat (SUSE-SU-2017:0415-1)

This update for expat fixes the following security issues : - CVE-2012-6702: Expat, when used in a parser that has not called XMLSetHashSalt or passed it a seed of 0, made it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the sran...

SUSE-SU-2017:0415-1 Security update for expat

This update for expat fixes the following security issues: - CVE-2012-6702: Expat, when used in a parser that has not called XMLSetHashSalt or passed it a seed of 0, made it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand...

Denial Of Service (DoS)

expat is susceptible to denial of service DoS attacks. The vulnerability is due to an incomplete fix of CVE-2012-0876 which leads to insufficient entropy for hash initialization...

Denial Of Service (DoS)

expat is vulnerable to denial of service DoS attacks with the potential for other impacts. The vulnerability exists because there are multiple integer overflows in the XMLGetBuffer function that leads to a heap-based buffer overflow which may lead to further unspecified impact. This issue is...

Denial Of Service (DoS) Or Arbitrary Code Execution

expat is vulnerable to denial of service DoS or arbitrary code execution attacks. When users input malformed document, expat XML parser mishandles the input which causes a buffer overflow during the processing and error reporting. This leading to a denial of service and conceivably result in remo...

GLSA-201701-21 : Expat: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-21 Expat: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Expat. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by enticing a user to process a speciall...

Expat: Multiple vulnerabilities

Background Expat is a set of XML parsing libraries. Description Multiple vulnerabilities have been discovered in Expat. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by enticing a user to process a specially crafted XML file, could execute arbitrary cod...

Tenable Passive Vulnerability Scanner 5.x < 5.2.0 Multiple Vulnerabilities (SWEET32)

The version of Tenable Passive Vulnerability Scanner PVS installed on the remote host is 5.x 5.2.0. It is, therefore, affected by multiple vulnerabilities : - Multiple denial of service vulnerabilities exist in Expat within file xmlparse.c due to a logical error in hash computations. An...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : expat (SSA:2016-359-01)

New expat packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-359-01. The tex...

[slackware-security] expat

New expat packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/expat-2.2.0-i586-1slack14.2.txz: Upgraded. This update fixes bugs and security issues: Multiple integer...

Amazon Linux AMI : expat (ALAS-2016-775)

CVE-2016-0718 : Out-of-bounds read flaw An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly, execute...

expat: Use-of-uninitialized-value in _start

Project: https://github.com/libexpat/libexpat.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4717026396340224 Project: expat Fuzzer: libFuzzerexpatparsefuzzer Fuzz target binary: expatparsefuzzer Job Type: libfuzzermsanexpat Platform Id: linux Crash Type:...

Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP 2.4.23 Release

Red Hat JBoss Core Services httpd 2.4.23 is now available from the Red Hat Customer Portal for Solaris and Microsoft Windows systems. Red Hat Product Security has rated this release as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

expat: Memory leak in poolGrow

A memory leak flaw was found in Expat. If an XML file processed by an application linked against Expat triggered a memory re-allocation failure, Expat failed to free the previously allocated memory. This could cause the application to exit unexpectedly or crash when all available memory is...

Scientific Linux Security Update : expat on SL6.x, SL7.x i386/x86_64 (20161128)

Security Fixes : - An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly, execute arbitrary code with the...

Medium: expat

Issue Overview: CVE-2016-0718: Out-of-bounds read flaw An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly,...

RedHat Update for expat RHSA-2016:2824-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 / 7 : expat (ELSA-2016-2824)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2824 advisory. - updated security fix for CVE-2016-0718 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

expat security update

CentOS Errata and Security Advisory CESA-2016:2824 An update for expat is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, whi...

Moderate: Red Hat Security Advisory: expat security update

An update for expat is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...