Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DSA-3582-1:BA58B
HistoryMay 18, 2016 - 5:18 a.m.

[SECURITY] [DSA 3582-1] expat security update

2016-05-1805:18:57
lists.debian.org
23

0.032 Low

EPSS

Percentile

91.3%

JSON

Debian Security Advisory DSA-3582-1 [email protected]
https://www.debian.org/security/ Salvatore Bonaccorso
May 18, 2016 https://www.debian.org/security/faq

Package : expat
CVE ID : CVE-2016-0718

Gustavo Grieco discovered that Expat, an XML parsing C library, does not
properly handle certain kinds of malformed input documents, resulting in
buffer overflows during processing and error reporting. A remote
attacker can take advantage of this flaw to cause an application using
the Expat library to crash, or potentially, to execute arbitrary code
with the privileges of the user running the application.

For the stable distribution (jessie), this problem has been fixed in
version 2.1.0-6+deb8u2. Additionally this update refreshes the fix for
CVE-2015-1283 to avoid relying on undefined behavior.

We recommend that you upgrade your expat packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian8kfreebsd-amd64libexpat1< 2.1.0-6+deb8u1libexpat1_2.1.0-6+deb8u1_kfreebsd-amd64.deb
Debian7amd64expat< 2.1.0-1+deb7u3expat_2.1.0-1+deb7u3_amd64.deb
Debian7s390expat< 2.1.0-1+deb7u2expat_2.1.0-1+deb7u2_s390.deb
Debian7armhflibexpat1-dev< 2.1.0-1+deb7u2libexpat1-dev_2.1.0-1+deb7u2_armhf.deb
Debian7powerpclibexpat1< 2.1.0-1+deb7u2libexpat1_2.1.0-1+deb7u2_powerpc.deb
Debian8mipsellibexpat1< 2.1.0-6+deb8u2libexpat1_2.1.0-6+deb8u2_mipsel.deb
Debian8arm64libexpat1< 2.1.0-6+deb8u2libexpat1_2.1.0-6+deb8u2_arm64.deb
Debian7i386lib64expat1-dev< 2.1.0-1+deb7u3lib64expat1-dev_2.1.0-1+deb7u3_i386.deb
Debian6i386lib64expat1< 2.0.1-7+squeeze2lib64expat1_2.0.1-7+squeeze2_i386.deb
Debian7s390libexpat1< 2.1.0-1+deb7u2libexpat1_2.1.0-1+deb7u2_s390.deb
Rows per page:
1-10 of 2061

Related

openvas 32
debian 4
nessus 41
archlinux 3
suse 4
ibm 39
ubuntu 4
osv 6
mageia 2
prion 6
freebsd 3
f5 5
nvd 6
cloudfoundry 1
cve 6
centos 1
securityvulns 2
freebsd_advisory 1
redhatcve 2
veracode 4
redhat 1
amazon 2
debiancve 3
cvelist 5
ubuntucve 4
oraclelinux 1
alpinelinux 2
mozilla 1
slackware 1
gentoo 1
zdt 1
packetstorm 1
thn 1
seebug 1
fedora 2
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2016:1512-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for expat (openSUSE-SU-2016:1523-1)
2016-06-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:1508-1)
2021-04-19 00:00:00
debian
debian
[SECURITY] [DSA 3582-1] expat security update
2016-05-18 05:18:57
[SECURITY] [DLA 483-1] expat security update
2016-05-19 20:04:46
[SECURITY] [DSA 3318-1] expat security update
2015-07-26 17:54:13
nessus
nessus
SUSE SLED12 / SLES12 Security Update : expat (SUSE-SU-2016:1508-1)
2016-06-17 00:00:00
openSUSE Security Update : expat (openSUSE-2016-695)
2016-06-09 00:00:00
openSUSE Security Update : expat (openSUSE-2016-660)
2016-06-01 00:00:00
archlinux
archlinux
lib32-expat: arbitrary code execution
2016-05-18 00:00:00
expat: arbitrary code execution
2016-05-18 00:00:00
expat: arbitrary code execution
2016-03-24 00:00:00
suse
suse
Security update for expat (important)
2016-05-30 14:09:21
Security update for expat (important)
2016-06-07 17:08:51
Security update for expat (important)
2016-06-07 13:08:02
ibm
ibm
Security Bulletin: Vulnerabilities in Expat component shipped with IBM Rational ClearQuest (CVE-2016-0718, CVE-2015-1283, CVE-2016-4472, CVE-2015-2716)
2020-02-04 16:40:40
Security Bulletin: Vulnerabilities in Expat component shipped with IBM Rational ClearCase (CVE-2016-0718, CVE-2015-1283, CVE-2016-4472, CVE-2015-2716)
2018-07-10 08:34:12
Security Bulletin: A security vulnerability has been identified in IBM HTTP Server used by IBM WebSphere Application Server which is shipped with IBM Workload Deployer (CVE-2015-1283)
2018-06-15 07:04:29
ubuntu
ubuntu
XML-RPC for C and C++ vulnerabilities
2016-06-20 00:00:00
Expat vulnerability
2015-08-31 00:00:00
Expat vulnerability
2016-05-18 00:00:00
osv
osv
expat - security update
2015-07-26 00:00:00
CVE-2016-0718
2016-05-26 16:59:00
expat - security update
2016-05-18 00:00:00
mageia
mageia
Updated expat package fixes security vulnerability
2015-07-27 20:18:02
Updated expat packages fix security vulnerability
2016-05-20 14:38:30
prion
prion
Buffer overflow
2016-05-26 16:59:00
Buffer overflow
2015-05-14 10:59:00
Integer overflow
2015-07-23 00:59:00
freebsd
freebsd
expat -- denial of service vulnerability on malformed input
2016-05-17 00:00:00
FreeBSD -- Multiple integer overflows in expat (libbsdxml) XML parser
2015-08-18 00:00:00
expat2 -- denial of service
2016-06-09 00:00:00
f5
f5
K52320548 : Expat vulnerability CVE-2016-0718
2017-09-18 00:00:00
K15104541 : Expat XML library vulnerability CVE-2015-1283
2016-10-11 00:00:00
K50459349 : Expat XML library vulnerability CVE-2015-2716
2017-02-10 00:00:00
nvd
nvd
CVE-2016-0718
2016-05-26 16:59:00
CVE-2015-1283
2015-07-23 00:59:12
CVE-2015-2716
2015-05-14 10:59:09
cloudfoundry
cloudfoundry
USN-2983-1 Expat vulnerability | Cloud Foundry
2016-06-13 00:00:00
cve
cve
CVE-2016-0718
2016-05-26 16:59:00
CVE-2015-1283
2015-07-23 00:59:12
CVE-2016-0719
2016-05-18 15:59:00
centos
centos
expat security update
2016-11-28 22:32:29
securityvulns
securityvulns
expat library integer overflow
2015-08-03 00:00:00
[SECURITY] [DSA 3318-1] expat security update
2015-08-03 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:20.expat
2015-08-18 00:00:00
redhatcve
redhatcve
CVE-2016-0718
2020-04-05 04:55:48
CVE-2016-4472
2016-06-09 09:48:44
veracode
veracode
Denial Of Service (DoS) Or Arbitrary Code Execution
2019-01-15 09:14:45
Denial Of Service (DoS) Or Arbitrary Code Execution
2017-02-01 03:14:43
Denial Of Service (DoS)
2017-02-01 05:26:42
redhat
redhat
(RHSA-2016:2824) Moderate: expat security update
2016-11-28 17:50:20
amazon
amazon
Medium: expat
2016-12-15 00:38:00
Medium: expat
2020-05-11 20:41:00
debiancve
debiancve
CVE-2016-0718
2016-05-26 16:59:00
CVE-2015-1283
2015-07-23 00:59:12
CVE-2016-4472
2016-06-30 17:59:04
cvelist
cvelist
CVE-2016-0718
2016-05-26 16:00:00
CVE-2016-9892
2017-03-02 23:00:00
CVE-2015-2716
2015-05-14 10:00:00
ubuntucve
ubuntucve
CVE-2016-0718
2016-05-17 00:00:00
CVE-2015-2716
2015-05-13 00:00:00
CVE-2015-1283
2015-07-22 00:00:00
oraclelinux
oraclelinux
expat security update
2016-11-28 00:00:00
alpinelinux
alpinelinux
CVE-2016-0718
2016-05-26 16:59:00
CVE-2016-4472
2016-06-30 17:59:04
mozilla
mozilla
Out-of-bounds read during XML parsing in Expat library — Mozilla
2016-08-02 00:00:00
slackware
slackware
[slackware-security] expat
2016-12-24 19:24:21
gentoo
gentoo
Expat: Multiple vulnerabilities
2017-01-11 00:00:00
zdt
zdt
ESET Endpoint Antivirus 6 Remote Code Execution Exploit
2017-02-28 00:00:00
packetstorm
packetstorm
ESET Endpoint Antivirus 6 Remote Code Execution
2017-02-27 00:00:00
thn
thn
Critical Flaw in ESET Antivirus Exposes Mac Users to Remote Hacking
2017-02-28 03:06:00
seebug
seebug
Remote Code Execution as Root via ESET Endpoint Antivirus 6（CVE-2016-9892）
2017-02-28 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: expat-2.1.1-2.fc24
2016-06-21 19:27:49
[SECURITY] Fedora 23 Update: expat-2.1.1-2.fc23
2016-06-19 07:27:54

0.032 Low

EPSS

Percentile

91.3%

JSON
Related for DEBIAN:DSA-3582-1:BA58B
openvas32debian4nessus41archlinux3suse4ibm39ubuntu4osv6mageia2prion6freebsd3f55nvd6cloudfoundry1cve6centos1securityvulns2freebsd_advisory1redhatcve2veracode4redhat1amazon2debiancve3cvelist5ubuntucve4oraclelinux1alpinelinux2mozilla1slackware1gentoo1zdt1packetstorm1thn1seebug1fedora2