[SECURITY] [DLA 281-1] expat security update

2015-07-2514:17:27

lists.debian.org

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.033 Low

EPSS

Percentile

91.3%

JSON

Package : expat
Version : 2.0.1-7+squeeze2
CVE ID : CVE-2015-1283

Multiple integer overflows in the XML_GetBuffer function in Expat
through 2.1.0, as used in Google Chrome before 44.0.2403.89 and
other products, allow remote attackers to cause a denial of service
(heap-based buffer overflow) or possibly have unspecified other
impact via crafted XML data, a related issue to CVE-2015-2716.

OSVersionArchitecturePackageVersionFilename
Debian8ppc64ellibexpat1-udeb< 2.1.0-6+deb8u1libexpat1-udeb_2.1.0-6+deb8u1_ppc64el.deb
Debian7mipsellibexpat1< 2.1.0-1+deb7u2libexpat1_2.1.0-1+deb7u2_mipsel.deb
Debian8arm64libexpat1< 2.1.0-6+deb8u1libexpat1_2.1.0-6+deb8u1_arm64.deb
Debian7ia64expat< 2.1.0-1+deb7u2expat_2.1.0-1+deb7u2_ia64.deb
Debian7kfreebsd-i386libexpat1-dev< 2.1.0-1+deb7u2libexpat1-dev_2.1.0-1+deb7u2_kfreebsd-i386.deb
Debian8mipsexpat< 2.1.0-6+deb8u1expat_2.1.0-6+deb8u1_mips.deb
Debian8allchromium-inspector< 44.0.2403.89-1~deb8u1chromium-inspector_44.0.2403.89-1~deb8u1_all.deb
Debian6i386lib64expat1< 2.0.1-7+squeeze2lib64expat1_2.0.1-7+squeeze2_i386.deb
Debian8kfreebsd-i386libexpat1-udeb< 2.1.0-6+deb8u1libexpat1-udeb_2.1.0-6+deb8u1_kfreebsd-i386.deb
Debian8i386lib64expat1< 2.1.0-6+deb8u1lib64expat1_2.1.0-6+deb8u1_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	ppc64el	libexpat1-udeb	< 2.1.0-6+deb8u1	libexpat1-udeb_2.1.0-6+deb8u1_ppc64el.deb
Debian	7	mipsel	libexpat1	< 2.1.0-1+deb7u2	libexpat1_2.1.0-1+deb7u2_mipsel.deb
Debian	8	arm64	libexpat1	< 2.1.0-6+deb8u1	libexpat1_2.1.0-6+deb8u1_arm64.deb
Debian	7	ia64	expat	< 2.1.0-1+deb7u2	expat_2.1.0-1+deb7u2_ia64.deb
Debian	7	kfreebsd-i386	libexpat1-dev	< 2.1.0-1+deb7u2	libexpat1-dev_2.1.0-1+deb7u2_kfreebsd-i386.deb
Debian	8	mips	expat	< 2.1.0-6+deb8u1	expat_2.1.0-6+deb8u1_mips.deb
Debian	8	all	chromium-inspector	< 44.0.2403.89-1~deb8u1	chromium-inspector_44.0.2403.89-1~deb8u1_all.deb
Debian	6	i386	lib64expat1	< 2.0.1-7+squeeze2	lib64expat1_2.0.1-7+squeeze2_i386.deb
Debian	8	kfreebsd-i386	libexpat1-udeb	< 2.1.0-6+deb8u1	libexpat1-udeb_2.1.0-6+deb8u1_kfreebsd-i386.deb
Debian	8	i386	lib64expat1	< 2.1.0-6+deb8u1	lib64expat1_2.1.0-6+deb8u1_i386.deb