CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
39.7%
An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can
have an integer overflow for nDefaultAtts on 32-bit platforms (where
UINT_MAX equals SIZE_MAX).
Author | Note |
---|---|
sbeattie | paraview uses system expat xotcl uses system expat poco uses system expat gdcm uses system expat audacity uses system expat simgear uses system expat coin3 uses system expat as of 4.0.0~CMake~6f54f1602475+ds1-1 sitecopy uses system expat since 1:0.16.0-1 (dapper!) insighttoolkit uses system expat as of 4.12.1-dfsg1 |
mdeslaur | apache2 uses system expat apr-util uses system expat cmake uses system expat ghostscript uses system expat firefox uses system expat |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 16.04 | noarch | ayttm | < any | UNKNOWN |
ubuntu | 16.04 | noarch | cableswig | < any | UNKNOWN |
ubuntu | 18.04 | noarch | cadaver | < any | UNKNOWN |
ubuntu | 20.04 | noarch | cadaver | < any | UNKNOWN |
ubuntu | 22.04 | noarch | cadaver | < any | UNKNOWN |
ubuntu | 24.04 | noarch | cadaver | < any | UNKNOWN |
ubuntu | 16.04 | noarch | cadaver | < any | UNKNOWN |
ubuntu | 18.04 | noarch | coin3 | < any | UNKNOWN |
ubuntu | 14.04 | noarch | coin3 | < any | UNKNOWN |
ubuntu | 16.04 | noarch | coin3 | < any | UNKNOWN |
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
39.7%