Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2726-1
HistoryAug 31, 2015 - 12:00 a.m.

Expat vulnerability

2015-08-3100:00:00
ubuntu.com
126

8.7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.032 Low

EPSS

Percentile

91.1%

JSON

Releases

  • Ubuntu 15.04
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • expat - XML parsing C library

Details

It was discovered that Expat incorrectly handled malformed XML data. If a
user or application linked against Expat were tricked into opening a
crafted XML file, an attacker could cause a denial of service, or possibly
execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu15.04noarchlib64expat1< 2.1.0-6ubuntu1.1UNKNOWN
Ubuntu15.04noarchexpat< 2.1.0-6ubuntu1.1UNKNOWN
Ubuntu15.04noarchexpat-dbgsym< 2.1.0-6ubuntu1.1UNKNOWN
Ubuntu15.04noarchlibexpat1< 2.1.0-6ubuntu1.1UNKNOWN
Ubuntu15.04noarchlibexpat1-dbgsym< 2.1.0-6ubuntu1.1UNKNOWN
Ubuntu15.04noarchlibexpat1-dev< 2.1.0-6ubuntu1.1UNKNOWN
Ubuntu15.04noarchlibexpat1-udeb< 2.1.0-6ubuntu1.1UNKNOWN
Ubuntu15.04noarchlibexpat1-udeb-dbgsym< 2.1.0-6ubuntu1.1UNKNOWN
Ubuntu14.04noarchlib64expat1< 2.1.0-4ubuntu1.1UNKNOWN
Ubuntu14.04noarchexpat< 2.1.0-4ubuntu1.1UNKNOWN
Rows per page:
1-10 of 241

Related

osv 6
ibm 40
nessus 50
openvas 26
mageia 1
securityvulns 4
freebsd 3
freebsd_advisory 1
debian 6
prion 3
debiancve 2
ubuntucve 3
suse 7
archlinux 4
cve 3
f5 4
veracode 2
amazon 1
ubuntu 4
alpinelinux 1
redhatcve 1
gentoo 2
slackware 1
apple 4
redhat 1
threatpost 1
chrome 1
kaspersky 1
androidsecurity 1
osv
osv
expat - security update
2015-07-26 00:00:00
expat - security update
2016-05-18 00:00:00
vnc4 vulnerabilities
2021-03-15 20:16:26
ibm
ibm
Security Bulletin:A security vulnerability has been identified in IBM HTTP Server used by IBM WebSphere Application Server shipped with Tivoli Network Manager IP Edition (CVE-2015-1283)
2018-06-17 15:10:40
Security Bulletin: A security vulnerability has been identified in IBM HTTP Server used by IBM WebSphere Application Server which is shipped with IBM Workload Deployer (CVE-2015-1283)
2018-06-15 07:04:29
Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with Intelligent Operations Center and related products (CVE-2015-1283)
2022-08-19 21:04:31
nessus
nessus
Debian DSA-3318-1 : expat - security update
2015-07-28 00:00:00
Juniper JSA10904
2019-05-29 00:00:00
FreeBSD : FreeBSD -- Multiple integer overflows in expat (libbsdxml) XML parser (0da8a68e-600a-11e6-a6c3-14dae9d210b8)
2016-08-12 00:00:00
openvas
openvas
Debian Security Advisory DSA 3318-1 (expat - security update)
2015-07-26 00:00:00
Mageia Linux Local Check: mgasa-2015-0285
2015-10-15 00:00:00
Debian Security Advisory DSA 3318-1 (expat - security update)
2015-07-26 00:00:00
mageia
mageia
Updated expat package fixes security vulnerability
2015-07-27 20:18:02
securityvulns
securityvulns
[SECURITY] [DSA 3318-1] expat security update
2015-08-03 00:00:00
expat library integer overflow
2015-08-03 00:00:00
Google Chrome / Chromium multiple security vulnerabilities
2015-07-26 00:00:00
freebsd
freebsd
FreeBSD -- Multiple integer overflows in expat (libbsdxml) XML parser
2015-08-18 00:00:00
expat2 -- denial of service
2016-06-09 00:00:00
chromium -- multiple vulnerabilities
2015-07-21 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:20.expat
2015-08-18 00:00:00
debian
debian
[SECURITY] [DSA 3318-1] expat security update
2015-07-26 17:54:13
[SECURITY] [DSA 3582-1] expat security update
2016-05-18 05:18:57
[SECURITY] [DSA 3582-1] expat security update
2016-05-18 05:18:57
prion
prion
Buffer overflow
2015-05-14 10:59:00
Integer overflow
2015-07-23 00:59:00
Buffer overflow
2016-06-30 17:59:00
debiancve
debiancve
CVE-2015-1283
2015-07-23 00:59:00
CVE-2016-4472
2016-06-30 17:59:00
ubuntucve
ubuntucve
CVE-2015-2716
2015-05-13 00:00:00
CVE-2015-1283
2015-07-22 00:00:00
CVE-2016-4472
2016-05-18 00:00:00
suse
suse
Security update for expat (important)
2016-06-07 13:08:02
Security update for expat (important)
2016-06-08 12:07:50
Security update for expat (important)
2016-05-30 14:09:21
archlinux
archlinux
expat: arbitrary code execution
2016-05-18 00:00:00
lib32-expat: arbitrary code execution
2016-05-18 00:00:00
expat: arbitrary code execution
2016-03-24 00:00:00
cve
cve
CVE-2015-1283
2015-07-23 00:59:00
CVE-2015-2716
2015-05-14 10:59:00
CVE-2016-4472
2016-06-30 17:59:00
f5
f5
K50459349 : Expat XML library vulnerability CVE-2015-2716
2017-02-10 00:00:00
K15104541 : Expat XML library vulnerability CVE-2015-1283
2016-10-11 00:00:00
SOL22232964 - Expat XML library vulnerability CVE-2016-4472
2016-10-21 00:00:00
veracode
veracode
Denial Of Service (DoS)
2017-02-01 05:26:42
Denial Of Service (DoS)
2017-03-27 05:30:04
amazon
amazon
Medium: expat
2020-05-11 20:41:00
ubuntu
ubuntu
VNC4 vulnerabilities
2021-03-15 00:00:00
XML-RPC for C and C++ vulnerabilities
2016-06-20 00:00:00
Oxide vulnerabilities
2015-08-04 00:00:00
alpinelinux
alpinelinux
CVE-2016-4472
2016-06-30 17:59:00
redhatcve
redhatcve
CVE-2016-4472
2016-06-09 09:48:44
gentoo
gentoo
Expat: Multiple vulnerabilities
2017-01-11 00:00:00
Chromium: Multiple vulnerabilities
2016-03-12 00:00:00
slackware
slackware
[slackware-security] expat
2016-12-24 19:24:21
apple
apple
About the security content of iTunes 12.6 - Apple Support
2017-03-22 07:40:40
About the security content of iTunes 12.6
2017-03-21 00:00:00
About the security content of iTunes 12.6 for Windows
2017-03-21 00:00:00
redhat
redhat
(RHSA-2015:1499) Important: chromium-browser security update
2015-07-27 00:00:00
threatpost
threatpost
Google Patches 43 Bugs in Chrome
2015-07-22 09:23:06
chrome
chrome
Stable Channel Update
2015-07-21 00:00:00
kaspersky
kaspersky
KLA10636 Multiple vulnerabilities in Google Chrome
2015-07-21 00:00:00
androidsecurity
androidsecurity
Android Security Bulletin—November 2016
2016-11-07 00:00:00

8.7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.032 Low

EPSS

Percentile

91.1%

JSON
Related for USN-2726-1
osv6ibm40nessus50openvas26mageia1securityvulns4freebsd3freebsd_advisory1debian6prion3debiancve2ubuntucve3suse7archlinux4cve3f54veracode2amazon1ubuntu4alpinelinux1redhatcve1gentoo2slackware1apple4redhat1threatpost1chrome1kaspersky1androidsecurity1