Lucene search
IBME455072BD221DBB8B1C58AAE10839300D4B2DB2A7147F02EDADB4E2016749D64HistoryDec 17, 2019 - 5:30 p.m.
Security Bulletin: IBM API Connect is impacted by a vulnerability in libexpat (CVE-2019-15903)
2019-12-1717:30:16
www.ibm.com
40
0.005 Low
EPSS
Percentile
76.5%
Summary
IBM API Connect has addressed the following vulnerability.
Vulnerability Details
CVEID:CVE-2019-15903
**DESCRIPTION:**In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/166560 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM API Connect | 2018.1-2018.4.1.7 |
Remediation/Fixes
| Affected releases | Fixed in VRMF | APAR | Remediation / First Fix |
|---|---|---|---|
| IBM API Connect V2018.1-2018.4.1.7 |
v2018.4.1.8
|
LI81254
|
Addressed in IBM API Connect v2018.4.1.8.
All components are impacted.
Follow this link and find the OVA package appropriate
form factor for your installation.
Connect&release=2018.4.1.7&platform=All&function=all&source=fc
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm api connect | eq | 2018.4.1.0 | |
| ibm api connect | eq | 2018.4.1.7 |
Related
openvas
openvas
Fedora Update for expat FEDORA-2019-9505c6b555
2019-09-26 00:00:00
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2020-1075)
2020-01-23 00:00:00
Fedora Update for expat FEDORA-2019-672ae0f060
2019-10-04 00:00:00
debian
debian
[SECURITY] [DLA 1912-1] expat security update
2019-09-06 14:21:17
[SECURITY] [DSA 4530-1] expat security update
2019-09-22 07:41:45
[SECURITY] [DSA 4530-1] expat security update
2019-09-22 07:41:45
nvd
nvd
CVE-2019-15903
2019-09-04 06:15:10
nessus
nessus
Debian DSA-4530-1 : expat - security update
2019-09-23 00:00:00
Slackware 14.0 / 14.1 / 14.2 / current : expat (SSA:2019-259-01)
2019-09-17 00:00:00
Photon OS 1.0: Expat PHSA-2020-1.0-0301
2020-06-18 00:00:00
suse
suse
Security update for expat (moderate)
2019-09-28 00:00:00
Security update for expat (moderate)
2019-09-28 00:00:00
Recommended update for MozillaThunderbird (important)
2019-11-09 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: expat-2.2.8-1.fc29
2019-10-02 01:41:36
[SECURITY] Fedora 30 Update: expat-2.2.8-1.fc30
2019-09-25 01:08:45
[SECURITY] Fedora 31 Update: expat-2.2.8-1.fc31
2019-09-21 00:04:26
cbl_mariner
cbl_mariner
CVE-2019-15903 affecting package expat 2.2.6-4
2022-01-10 03:59:19
ibm
ibm
ubuntu
ubuntu
Expat vulnerability
2019-09-12 00:00:00
Expat vulnerability
2019-09-12 00:00:00
VTK vulnerabilities
2021-03-15 00:00:00
osv
osv
expat - security update
2019-09-06 00:00:00
CVE-2019-15903
2019-09-04 06:15:10
expat - security update
2019-09-22 00:00:00
freebsd
freebsd
python 3.7 -- multiple vulnerabilities
2019-09-14 00:00:00
redhatcve
redhatcve
CVE-2019-15903
2019-12-28 03:54:22
slackware
slackware
[slackware-security] expat
2019-09-16 21:54:40
[slackware-security] python
2019-10-20 20:16:04
mageia
mageia
Updated expat packages fix security vulnerability
2019-11-08 02:36:48
Updated firefox packages fix security vulnerabilities
2019-11-08 02:36:48
Updated thunderbird packages fix security vulnerabilities
2019-11-08 02:36:48
cve
cve
CVE-2019-15903
2019-09-04 06:15:10
cvelist
cvelist
CVE-2019-15903
2019-09-04 05:59:16
f5
f5
K34239812 : Libexpat vulnerability CVE-2019-15903
2022-08-05 00:00:00
K05295469 : Expat vulnerability CVE-2019-15903
2022-02-03 00:00:00
prion
prion
Heap overflow
2019-09-04 06:15:00
cloudfoundry
cloudfoundry
USN-4132-1: Expat vulnerability | Cloud Foundry
2019-09-30 00:00:00
alpinelinux
alpinelinux
CVE-2019-15903
2019-09-04 06:15:10
debiancve
debiancve
CVE-2019-15903
2019-09-04 06:15:10
veracode
veracode
Denial Of Service (Dos)
2019-09-05 06:48:20
ubuntucve
ubuntucve
CVE-2019-15903
2019-09-04 00:00:00
symantec
symantec
Libexpat Expat CVE-2019-15903 Heap Buffer Overflow Vulnerability
2019-09-04 00:00:00
centos
centos
expat security update
2020-10-20 17:58:03
almalinux
almalinux
Moderate: expat security update
2020-11-03 12:09:00
gentoo
gentoo
Expat: Multiple vulnerabilities
2019-11-25 00:00:00
oraclelinux
oraclelinux
expat security update
2020-11-10 00:00:00
expat security update
2020-10-06 00:00:00
thunderbird security update
2019-10-29 00:00:00
amazon
amazon
redhat
redhat
(RHSA-2020:4484) Moderate: expat security update
2020-11-03 12:09:00
(RHSA-2020:3952) Moderate: expat security update
2020-09-29 07:46:19
rocky
rocky
expat security update
2020-11-03 12:09:00
altlinux
altlinux
Security fix for the ALT Linux 9 package expat version 2.2.9-alt1
2020-05-31 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 68.2.0-alt1
2019-10-27 00:00:00
kaspersky
kaspersky
KLA11624 Multiple vulnerabilities in Apple iCloud
2019-12-11 00:00:00
KLA11623 Multiple vulnerabilities in Apple iTunes
2019-12-11 00:00:00
KLA11590 Multiple vulnerabilities in Mozilla Firefox ESR
2019-10-22 00:00:00
apple
apple
About the security content of iCloud for Windows 7.16 - Apple Support
2020-04-05 05:57:56
About the security content of iCloud for Windows 10.9 - Apple Support
2020-04-05 05:12:53
About the security content of iCloud for Windows 10.9
2019-12-11 00:00:00
photon
photon
archlinux
archlinux
[ASA-201910-15] thunderbird: multiple issues
2019-10-26 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in - Thunderbird 68.2 — Mozilla
2019-10-22 00:00:00
Security vulnerabilities fixed in - Firefox ESR 68.2 — Mozilla
2019-10-22 00:00:00
0.005 Low
EPSS
Percentile
76.5%
Related for E455072BD221DBB8B1C58AAE10839300D4B2DB2A7147F02EDADB4E2016749D64