Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2009-2625
HistoryAug 06, 2009 - 12:00 a.m.

CVE-2009-2625

2009-08-0600:00:00
ubuntu.com
ubuntu.com
16

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.077 Low

EPSS

Percentile

94.1%

JSON

XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime
Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
before Update 20, and in other products, allows remote attackers to cause a
denial of service (infinite loop and application hang) via malformed XML
input, as demonstrated by the Codenomicon XML fuzzing framework.

Notes

Author Note
jdstrand this originally come out as a bug in expat (#1990430). CVE-2009-3720 was later assigned to this identical issue, since this issue was worded as a Java vulnerability. Our USN references this CVE and CVE-2009-3720 will be ignored.
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchexpat< 1.95.8-3ubuntu0.1UNKNOWN
ubuntu8.04noarchexpat< 2.0.1-0ubuntu1.1UNKNOWN
ubuntu8.10noarchexpat< 2.0.1-4ubuntu0.8.10.1UNKNOWN
ubuntu9.04noarchexpat< 2.0.1-4ubuntu0.9.04.1UNKNOWN
ubuntu9.10noarchexpat< 2.0.1-4ubuntu1.1UNKNOWN
ubuntu10.04noarchexpat< 2.0.1-7ubuntu1UNKNOWN
ubuntu10.10noarchexpat< 2.0.1-7ubuntu1UNKNOWN
ubuntu8.04noarchopenjdk-6< 6b18-1.8.2-4ubuntu1~8.04.1UNKNOWN
ubuntu8.10noarchopenjdk-6< 6b12-0ubuntu6.5UNKNOWN
ubuntu9.04noarchopenjdk-6< 6b14-1.4.1-0ubuntu11UNKNOWN
Rows per page:
1-10 of 141

Related

openvas 91
nessus 62
prion 2
ubuntucve 2
cve 2
debiancve 2
ubuntu 6
f5 2
slackware 1
freebsd 2
fedora 17
httpd 2
altlinux 2
redhat 2
centos 1
oraclelinux 2
veracode 1
openvas
openvas
Mandriva Update for davfs MDVSA-2009:220-1 (davfs)
2010-01-15 00:00:00
Mandriva Security Advisory MDVSA-2009:211-1 (expat)
2009-12-10 00:00:00
Mandriva Security Advisory MDVSA-2009:219-1 (kompozer)
2009-12-10 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : python (MDVSA-2009:212-1)
2009-08-24 00:00:00
Mandriva Linux Security Advisory : kompozer (MDVSA-2009:219-1)
2009-08-25 00:00:00
Mandriva Linux Security Advisory : audacity (MDVSA-2009:215-1)
2009-08-24 00:00:00
prion
prion
Buffer overflow
2009-11-03 16:30:00
Buffer overflow
2009-12-04 21:30:00
ubuntucve
ubuntucve
CVE-2009-3720
2009-11-03 00:00:00
CVE-2009-3560
2009-12-04 00:00:00
cve
cve
CVE-2009-3720
2009-11-03 16:30:00
CVE-2009-3560
2009-12-04 21:30:00
debiancve
debiancve
CVE-2009-3720
2009-11-03 16:30:00
CVE-2009-3560
2009-12-04 21:30:00
ubuntu
ubuntu
XML-RPC for C and C++ vulnerabilities
2010-02-18 00:00:00
CMake vulnerabilities
2010-04-15 00:00:00
Python 2.5 vulnerabilities
2010-01-21 00:00:00
f5
f5
SOL15905 - Expat vulnerabilities CVE-2009-3560 and CVE-2009-3720
2014-12-11 00:00:00
K15905 : Expat vulnerabilities CVE-2009-3560 and CVE-2009-3720
2015-03-16 00:00:00
slackware
slackware
[slackware-security] expat
2011-02-11 01:17:08
freebsd
freebsd
libwww -- multiple vulnerabilities
2005-10-12 00:00:00
expat2 -- Parser crash with specially formatted UTF-8 sequences
2009-01-17 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: SimGear-2.0.0-5.fc13
2011-04-29 22:18:11
[SECURITY] Fedora 11 Update: expat-2.0.1-6.fc11.1
2009-11-04 12:31:44
[SECURITY] Fedora 14 Update: SimGear-2.0.0-5.fc14
2011-04-29 22:18:43
httpd
httpd
Apache Httpd < 2.2.17 : expat DoS
2009-08-21 00:00:00
Apache Httpd < 2.0.64 : expat DoS
2009-08-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package centerim version 4.22.10-alt0.M50P.1
2011-01-13 00:00:00
Security fix for the ALT Linux 5 package centerim version 4.22.10-alt1
2010-11-24 00:00:00
redhat
redhat
(RHSA-2010:0002) Moderate: PyXML security update
2010-01-04 00:00:00
(RHSA-2009:1572) Moderate: 4Suite security update
2009-11-10 00:00:00
centos
centos
PyXML security update
2010-01-04 23:32:13
oraclelinux
oraclelinux
PyXML security update
2010-01-04 00:00:00
4Suite security update
2009-11-10 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:55:28

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.077 Low

EPSS

Percentile

94.1%

JSON
Related for UB:CVE-2009-2625
openvas91nessus62prion2ubuntucve2cve2debiancve2ubuntu6f52slackware1freebsd2fedora17httpd2altlinux2redhat2centos1oraclelinux2veracode1