Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-1283HistoryJul 23, 2015 - 12:59 a.m.
CVE-2015-1283
2015-07-2300:59:12
Debian Security Bug Tracker
security-tracker.debian.org
12
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.033 Low
EPSS
Percentile
91.3%
Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | expat | < 2.1.0-7 | expat_2.1.0-7_all.deb |
| Debian | 11 | all | expat | < 2.1.0-7 | expat_2.1.0-7_all.deb |
| Debian | 999 | all | expat | < 2.1.0-7 | expat_2.1.0-7_all.deb |
| Debian | 13 | all | expat | < 2.1.0-7 | expat_2.1.0-7_all.deb |
Related
cve
cve
ubuntucve
ubuntucve
openvas
openvas
Debian: Security Advisory (DLA-281-1)
2023-03-08 00:00:00
Python < 2.7.12, 3.3.x < 3.3.7, 3.4.x < 3.4.5, 3.5.x < 3.5.2 Expat 2.1.1 (bpo-26556) - Linux
2021-11-01 00:00:00
Huawei EulerOS: Security Advisory for apr-util (EulerOS-SA-2020-1639)
2020-06-16 00:00:00
nessus
nessus
F5 Networks BIG-IP : Expat XML library vulnerability (K50459349)
2017-03-01 00:00:00
F5 Networks BIG-IP : Expat XML library vulnerability (K15104541)
2016-10-12 00:00:00
NewStart CGSL CORE 5.04 / MAIN 5.04 : expat Vulnerability (NS-SA-2020-0077)
2020-12-09 00:00:00
debian
debian
[SECURITY] [DLA 281-1] expat security update
2015-07-25 14:17:27
[SECURITY] [DSA 3318-1] expat security update
2015-07-26 17:54:13
[SECURITY] [DSA 3582-1] expat security update
2016-05-18 05:18:57
cvelist
cvelist
f5
f5
K15104541 : Expat XML library vulnerability CVE-2015-1283
2016-10-11 00:00:00
K50459349 : Expat XML library vulnerability CVE-2015-2716
2017-02-10 00:00:00
SOL22232964 - Expat XML library vulnerability CVE-2016-4472
2016-10-21 00:00:00
veracode
veracode
Denial Of Service (DoS)
2017-02-01 05:26:42
Denial Of Service (DoS)
2017-03-27 05:30:04
Arbitrary Code Execution
2019-05-02 05:39:09
nvd
nvd
prion
prion
Buffer overflow
2015-05-14 10:59:00
Integer overflow
2015-07-23 00:59:00
Buffer overflow
2016-06-30 17:59:00
archlinux
archlinux
expat: arbitrary code execution
2016-03-24 00:00:00
expat: arbitrary code execution
2016-05-18 00:00:00
lib32-expat: arbitrary code execution
2016-05-18 00:00:00
amazon
amazon
Medium: expat
2020-05-11 20:41:00
debiancve
debiancve
CVE-2016-4472
2016-06-30 17:59:04
redhatcve
redhatcve
CVE-2016-4472
2016-06-09 09:48:44
freebsd
freebsd
expat2 -- denial of service
2016-06-09 00:00:00
FreeBSD -- Multiple integer overflows in expat (libbsdxml) XML parser
2015-08-18 00:00:00
alpinelinux
alpinelinux
CVE-2016-4472
2016-06-30 17:59:04
osv
osv
CVE-2016-4472
2016-06-30 17:59:00
expat - security update
2015-07-25 00:00:00
expat - security update
2015-07-26 00:00:00
centos
centos
expat security update
2020-04-08 17:58:10
thunderbird security update
2015-05-18 14:07:12
firefox security update
2015-05-13 00:01:13
mozilla
mozilla
Buffer overflow when parsing compressed XML — Mozilla
2015-05-12 00:00:00
oraclelinux
oraclelinux
expat security update
2020-04-06 00:00:00
thunderbird security update
2015-05-19 00:00:00
firefox security update
2015-05-13 00:00:00
redhat
redhat
(RHSA-2020:2508) Moderate: expat security update
2020-06-10 16:46:54
(RHSA-2020:1011) Moderate: expat security update
2020-03-31 09:08:15
(RHSA-2015:1012) Important: thunderbird security update
2015-05-18 00:00:00
mageia
mageia
Updated expat package fixes security vulnerability
2015-07-27 20:18:02
securityvulns
securityvulns
[SECURITY] [DSA 3318-1] expat security update
2015-08-03 00:00:00
expat library integer overflow
2015-08-03 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:20.expat
2015-08-18 00:00:00
ubuntu
ubuntu
Expat vulnerability
2015-08-31 00:00:00
VNC4 vulnerabilities
2021-03-15 00:00:00
Thunderbird vulnerabilities
2015-05-18 00:00:00
slackware
slackware
[slackware-security] expat
2016-12-24 19:24:21
suse
suse
Security update for expat (important)
2016-06-07 13:08:02
Security update for expat (important)
2016-06-08 12:07:50
Security update for expat (important)
2016-06-07 17:08:51
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.033 Low
EPSS
Percentile
91.3%
Related for DEBIANCVE:CVE-2015-1283