Описание
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| expat | fixed | 2.8.2-1 | package |
Примечания
https://github.com/libexpat/libexpat/pull/1252
Fixed by: https://github.com/libexpat/libexpat/commit/deeb97f7c88d17a16b0ea2521a13733abc283347
Fixed by: https://github.com/libexpat/libexpat/commit/cee20e91bf14dc7f6d2fc48f0d70d86b2dc3afea
EPSS
Процентиль: 4%
0.00139
Низкий
Связанные уязвимости
CVSS3: 6.9
ubuntu
около 1 месяца назад
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.
CVSS3: 6.9
redhat
около 1 месяца назад
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.
CVSS3: 6.9
nvd
около 1 месяца назад
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.
CVSS3: 6.9
msrc
около 1 месяца назад
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.
CVSS3: 6.9
github
около 1 месяца назад
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.
EPSS
Процентиль: 4%
0.00139
Низкий