Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:28268
HistoryDec 06, 2020 - 3:49 a.m.

Denial Of Service (DoS)

2020-12-0603:49:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.013 Low

EPSS

Percentile

85.8%

JSON

tdom is vulnerable to denial of service. A buffer overflow in the big2_toUtf8 function in lib/xmltok.c allows a context-dependent attacker to crash the application via a malicious XML document containing malformed UTF-8 sequences.

References

Related

openvas 57
seebug 1
debian 5
nessus 69
freebsd 3
osv 2
httpd 2
fedora 3
centos 1
oraclelinux 1
redhat 3
ubuntu 6
prion 1
nvd 1
f5 2
cve 1
slackware 2
ubuntucve 1
debiancve 1
cvelist 1
gentoo 1
kaspersky 1
apple 4
vmware 4
openvas
openvas
SLES9: Security update for expat
2009-12-14 00:00:00
SLES11: Security update for expat
2009-12-14 00:00:00
Debian: Security Advisory (DSA-1953-1)
2023-03-08 00:00:00
seebug
seebug
expat big2_toUtf8()函数XMLζ–‡δ»Άθ§£ζžζ‹’η»ζœεŠ‘ζΌζ΄ž
2009-12-24 00:00:00
debian
debian
[SECURITY] [DSA-1953-2] New expat packages fix regression
2009-12-31 14:15:48
[SECURITY] [DSA-1953-1] New expat packages fix denial of service
2009-12-15 20:23:03
[SECURITY] [DSA-1953-2] New expat packages fix regression
2009-12-31 14:15:48
nessus
nessus
SuSE 11 Security Update : expat (SAT Patch Number 1765)
2010-01-15 00:00:00
SuSE9 Security Update : expat (YOU Patch Number 12558)
2009-12-14 00:00:00
SuSE 11 Security Update : expat (SAT Patch Number 1654)
2009-12-14 00:00:00
freebsd
freebsd
expat2 -- buffer over-read and crash
2009-10-05 00:00:00
apr -- multiple vunerabilities
2010-10-02 00:00:00
libwww -- multiple vulnerabilities
2005-10-12 00:00:00
osv
osv
expat - regression fix
2009-12-15 00:00:00
python - several vulnerabilities
2010-01-25 00:00:00
httpd
httpd
Apache Httpd < 2.2.17 : expat DoS
2009-12-18 00:00:00
Apache Httpd < 2.0.64 : expat DoS
2009-12-18 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: expat-2.0.1-8.fc11
2009-12-05 00:02:48
[SECURITY] Fedora 12 Update: expat-2.0.1-8.fc12
2009-12-05 00:06:09
[SECURITY] Fedora 10 Update: expat-2.0.1-8.fc10
2009-12-04 23:57:13
centos
centos
expat security update
2009-12-07 23:34:29
oraclelinux
oraclelinux
expat security update
2009-12-07 00:00:00
redhat
redhat
(RHSA-2009:1625) Moderate: expat security update
2009-12-07 00:00:00
(RHSA-2017:3239) Important: Red Hat JBoss Enterprise Application Platform 6.4.18 security update
2017-11-16 19:09:33
(RHSA-2009:1692) Important: rhev-hypervisor security and bug fix update
2009-12-23 00:00:00
ubuntu
ubuntu
XML-RPC for C and C++ vulnerabilities
2010-02-18 00:00:00
Expat vulnerabilities
2010-01-20 00:00:00
PyXML vulnerabilities
2010-01-26 00:00:00
prion
prion
Buffer overflow
2009-12-04 21:30:00
nvd
nvd
CVE-2009-3560
2009-12-04 21:30:00
f5
f5
K15905 : Expat vulnerabilities CVE-2009-3560 and CVE-2009-3720
2015-03-16 00:00:00
SOL15905 - Expat vulnerabilities CVE-2009-3560 and CVE-2009-3720
2014-12-11 00:00:00
cve
cve
CVE-2009-3560
2009-12-04 21:30:00
slackware
slackware
[slackware-security] expat
2011-02-11 01:17:08
[slackware-security] httpd
2011-02-11 01:17:26
ubuntucve
ubuntucve
CVE-2009-3560
2009-12-04 00:00:00
debiancve
debiancve
CVE-2009-3560
2009-12-04 21:30:00
cvelist
cvelist
CVE-2009-3560
2009-12-04 21:00:00
gentoo
gentoo
Expat: Multiple vulnerabilities
2012-09-24 00:00:00
kaspersky
kaspersky
KLA10066 Multiple vulnerabilities in Apache httpd
2010-10-19 00:00:00
apple
apple
About the security content of iTunes 12.6
2017-03-21 00:00:00
About the security content of iTunes 12.6 - Apple Support
2017-03-22 07:40:40
About the security content of iTunes 12.6 for Windows
2017-03-21 00:00:00
vmware
vmware
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
VMware ESXi and ESX updates to third party library and ESX Service Console
2012-01-30 00:00:00

0.013 Low

EPSS

Percentile

85.8%

JSON
Related for VERACODE:28268
openvas57seebug1debian5nessus69freebsd3osv2httpd2fedora3centos1oraclelinux1redhat3ubuntu6prion1nvd1f52cve1slackware2ubuntucve1debiancve1cvelist1gentoo1kaspersky1apple4vmware4