CVE-2018-20843

Опубликовано: 24 июн. 2019

Источник: ubuntu

Приоритет: low

EPSS Низкий

CVSS2: 7.8

CVSS3: 7.5

Описание

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).

Релиз	Статус	Примечание
bionic	not-affected	code-not-compiled
cosmic	not-affected	code-not-compiled
devel	not-affected	code-not-compiled
disco	not-affected	code-not-compiled
eoan	not-affected	code-not-compiled
esm-infra-legacy/trusty	not-affected	code-not-compiled
esm-infra/bionic	not-affected	code-not-compiled
esm-infra/focal	not-affected	code-not-compiled
esm-infra/xenial	not-affected	code-not-compiled
focal	not-affected	code-not-compiled

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	code-not-compiled
cosmic	not-affected	code-not-compiled
devel	not-affected	code-not-compiled
disco	not-affected	code-not-compiled
eoan	not-affected	code-not-compiled
esm-infra-legacy/trusty	not-affected	code-not-compiled
esm-infra/bionic	not-affected	code-not-compiled
esm-infra/focal	not-affected	code-not-compiled
esm-infra/xenial	not-affected	code-not-compiled
focal	not-affected	code-not-compiled

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system expat
cosmic	not-affected	uses system expat
devel	not-affected	uses system expat
disco	not-affected	uses system expat
eoan	not-affected	uses system expat
esm-apps/bionic	not-affected	uses system expat
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/xenial	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-apps/xenial	needs-triage
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	DNE
groovy	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-apps/xenial	needs-triage
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	DNE
groovy	DNE

Показывать по

Релиз	Статус	Примечание
bionic	ignored	end of standard support, was needs-triage
cosmic	ignored	end of life
devel	needs-triage
disco	ignored	end of life
eoan	ignored	end of life
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/xenial	needs-triage

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	code-not-compiled
cosmic	not-affected	code-not-compiled
devel	not-affected	code-not-compiled
disco	not-affected	code-not-compiled
eoan	not-affected	code-not-compiled
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	code-not-compiled
esm-infra/focal	not-affected	code-not-compiled
esm-infra/xenial	not-affected	code-not-compiled
focal	not-affected	code-not-compiled

Показывать по

Релиз	Статус	Примечание
bionic	ignored	end of standard support, was needed
cosmic	ignored	end of life
devel	not-affected	uses system expat
disco	ignored	end of life
eoan	ignored	end of life
esm-apps/bionic	needed
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/xenial	needed

Показывать по

Релиз	Статус	Примечание
bionic	released	2.2.5-3ubuntu0.1
cosmic	released	2.2.6-1ubuntu0.18.10
devel	released	2.2.6-2
disco	released	2.2.6-1ubuntu0.19.04
eoan	released	2.2.6-2
esm-infra-legacy/trusty	released	2.1.0-4ubuntu1.4+esm1
esm-infra/bionic	released	2.2.5-3ubuntu0.1
esm-infra/focal	released	2.2.6-2
esm-infra/xenial	released	2.1.0-7ubuntu0.16.04.4
focal	released	2.2.6-2

Показывать по

Релиз	Статус	Примечание
bionic	not-affected
cosmic	ignored	end of life
devel	not-affected
disco	ignored	end of life
eoan	not-affected
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	not-affected
groovy	not-affected
hirsute	not-affected

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system expat
cosmic	not-affected	uses system expat
devel	not-affected	uses system expat
disco	not-affected	uses system expat
eoan	not-affected	uses system expat
esm-apps/bionic	not-affected	uses system expat
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/xenial	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	code-not-compiled
cosmic	not-affected	code-not-compiled
devel	not-affected	code-not-compiled
disco	not-affected	code-not-compiled
eoan	not-affected	code-not-compiled
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	code-not-compiled
esm-infra/focal	not-affected	code-not-compiled
esm-infra/xenial	not-affected	code-not-compiled
focal	not-affected	code-not-compiled

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-apps/xenial	needs-triage
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	DNE
groovy	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system expat
cosmic	not-affected	uses system expat
devel	DNE
disco	not-affected	uses system expat
eoan	not-affected	uses system expat
esm-apps/bionic	not-affected	uses system expat
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/xenial	needed
esm-infra-legacy/trusty	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	DNE
groovy	DNE
hirsute	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	DNE
groovy	DNE
hirsute	DNE

Показывать по

Релиз	Статус	Примечание
bionic	ignored	end of standard support, was needed
devel	needed
esm-apps/bionic	released	1.2-4ubuntu0.18.04.1~esm4
esm-apps/focal	released	1.2-4ubuntu0.20.04.1~esm4
esm-apps/jammy	released	1.2-4ubuntu0.22.04.1~esm4
esm-apps/noble	released	1.2-4.1ubuntu2.24.0.4.1+esm2
esm-apps/xenial	released	1.2-3ubuntu0.16.04.1~esm2
focal	ignored	end of standard support, was needed
hirsute	ignored	end of life
impish	ignored	end of life

Показывать по

Релиз	Статус	Примечание
bionic	ignored	end of standard support, was needs-triage
cosmic	ignored	end of life
devel	ignored
disco	ignored	end of life
eoan	ignored	end of life
esm-apps/bionic	ignored
esm-apps/focal	ignored
esm-apps/jammy	ignored
esm-apps/noble	ignored
esm-apps/xenial	ignored

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system expat
cosmic	not-affected	uses system expat
devel	not-affected	uses system expat
disco	not-affected	uses system expat
eoan	not-affected	uses system expat
esm-apps/bionic	not-affected	uses system expat
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/xenial	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system expat
cosmic	not-affected	uses system expat
devel	not-affected	uses system expat
disco	not-affected	uses system expat
eoan	not-affected	uses system expat
esm-apps/bionic	not-affected	uses system expat
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/xenial	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system expat
cosmic	not-affected	uses system expat
devel	needs-triage
disco	not-affected	uses system expat
eoan	not-affected	uses system expat
esm-apps/bionic	not-affected	uses system expat
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/xenial	not-affected	uses system expat
esm-infra-legacy/trusty	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	code-not-compiled
cosmic	not-affected	code-not-compiled
devel	DNE
disco	not-affected	code-not-compiled
eoan	not-affected	code-not-compiled
esm-apps/bionic	not-affected	code-not-compiled
esm-apps/xenial	not-affected	code-not-compiled
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	DNE

Показывать по

Релиз	Статус	Примечание
bionic	ignored	end of standard support, was needs-triage
cosmic	ignored	end of life
devel	needs-triage
disco	ignored	end of life
eoan	ignored	end of life
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/xenial	needs-triage

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system expat
cosmic	ignored	end of life
devel	not-affected	uses system expat
disco	not-affected	uses system expat
eoan	not-affected	uses system expat
esm-apps/bionic	not-affected	uses system expat
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/xenial	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	code-not-compiled
cosmic	not-affected	code-not-compiled
devel	not-affected	code-not-compiled
disco	not-affected	code-not-compiled
eoan	not-affected	code-not-compiled
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	code-not-compiled
esm-infra/focal	not-affected	code-not-compiled
esm-infra/xenial	not-affected	code-not-compiled
focal	not-affected	code-not-compiled

Показывать по

Релиз	Статус	Примечание
bionic	not-affected
cosmic	ignored	end of life
devel	not-affected
disco	ignored	end of life
eoan	not-affected
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	not-affected
groovy	not-affected
hirsute	not-affected

Показывать по

Релиз	Статус	Примечание
bionic	ignored	end of standard support, was needed
cosmic	ignored	end of life
devel	DNE
disco	not-affected	code not present
eoan	not-affected	code not present
esm-apps/bionic	needed
esm-apps/xenial	needed
esm-infra-legacy/trusty	needed
esm-infra/focal	DNE
focal	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-apps/xenial	released	5.10.1+dfsg-2.1ubuntu0.1~esm1
esm-infra-legacy/trusty	released	5.8.0-14.1ubuntu3+esm1
esm-infra/focal	DNE
focal	DNE
groovy	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system expat
cosmic	not-affected	uses system expat
devel	not-affected	uses system expat
disco	not-affected	uses system expat
eoan	not-affected	uses system expat
esm-apps/bionic	not-affected	uses system expat
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/xenial	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	DNE
groovy	DNE
hirsute	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	DNE
groovy	DNE
hirsute	DNE

Показывать по

Релиз	Статус	Примечание
bionic	ignored	end of standard support, was needs-triage
cosmic	ignored	end of life
devel	needs-triage
disco	ignored	end of life
eoan	ignored	end of life
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/xenial	needs-triage

Показывать по

Ссылки на источники

EPSS

Процентиль: 90%

0.05817

Низкий

7.8 High

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVE-2018-20843

CVSS3: 7.5

redhat

больше 6 лет назад

CVE-2018-20843

CVSS3: 7.5

nvd

больше 6 лет назад

CVE-2018-20843

CVSS3: 7.5

msrc

около 5 лет назад

Описание отсутствует

CVE-2018-20843

CVSS3: 7.5

debian

больше 6 лет назад

In libexpat in Expat before 2.2.7, XML input including XML names that ...

openSUSE-SU-2019:1777-1

suse-cvrf

больше 6 лет назад

Security update for expat

EPSS

Процентиль: 90%

0.05817

Низкий

7.8 High

CVSS2

7.5 High

CVSS3

CVE-2018-20843

Описание

Пакет apache2

Пакет apr-util

Пакет audacity

Пакет ayttm

Пакет cableswig

Пакет cadaver

Пакет cmake

Пакет coin3

Пакет expat

Пакет firefox

Пакет gdcm

Пакет ghostscript

Пакет insighttoolkit

Пакет insighttoolkit4

Пакет kompozer

Пакет libparagui1.1

Пакет libxmltok

Пакет matanza

Пакет poco

Пакет simgear

Пакет sitecopy

Пакет smart

Пакет swish-e

Пакет tdom

Пакет texlive-bin

Пакет thunderbird

Пакет vnc4

Пакет vtk

Пакет wbxml2

Пакет wxwidgets2.6

Пакет wxwidgets2.8

Пакет xmlrpc-c

Ссылки на источники

Связанные уязвимости