Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-20843

Опубликовано: 24 июн. 2019
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 7.8
CVSS3: 7.5

Описание

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).

РелизСтатусПримечание
bionic

not-affected

code-not-compiled
cosmic

not-affected

code-not-compiled
devel

not-affected

code-not-compiled
disco

not-affected

code-not-compiled
eoan

not-affected

code-not-compiled
esm-infra-legacy/trusty

not-affected

code-not-compiled
esm-infra/bionic

not-affected

code-not-compiled
esm-infra/focal

not-affected

code-not-compiled
esm-infra/xenial

not-affected

code-not-compiled
focal

not-affected

code-not-compiled

Показывать по

РелизСтатусПримечание
bionic

not-affected

code-not-compiled
cosmic

not-affected

code-not-compiled
devel

not-affected

code-not-compiled
disco

not-affected

code-not-compiled
eoan

not-affected

code-not-compiled
esm-infra-legacy/trusty

not-affected

code-not-compiled
esm-infra/bionic

not-affected

code-not-compiled
esm-infra/focal

not-affected

code-not-compiled
esm-infra/xenial

not-affected

code-not-compiled
focal

not-affected

code-not-compiled

Показывать по

РелизСтатусПримечание
bionic

not-affected

uses system expat
cosmic

not-affected

uses system expat
devel

not-affected

uses system expat
disco

not-affected

uses system expat
eoan

not-affected

uses system expat
esm-apps/bionic

not-affected

uses system expat
esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/xenial

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-apps/xenial

needs-triage

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-apps/xenial

needs-triage

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

needs-triage

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/xenial

needs-triage

Показывать по

РелизСтатусПримечание
bionic

not-affected

code-not-compiled
cosmic

not-affected

code-not-compiled
devel

not-affected

code-not-compiled
disco

not-affected

code-not-compiled
eoan

not-affected

code-not-compiled
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

code-not-compiled
esm-infra/focal

not-affected

code-not-compiled
esm-infra/xenial

not-affected

code-not-compiled
focal

not-affected

code-not-compiled

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

not-affected

uses system expat
disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needed

esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/xenial

needed

Показывать по

РелизСтатусПримечание
bionic

released

2.2.5-3ubuntu0.1
cosmic

released

2.2.6-1ubuntu0.18.10
devel

released

2.2.6-2
disco

released

2.2.6-1ubuntu0.19.04
eoan

released

2.2.6-2
esm-infra-legacy/trusty

not-affected

2.1.0-4ubuntu1.4+esm1
esm-infra/bionic

not-affected

2.2.5-3ubuntu0.1
esm-infra/focal

not-affected

2.2.6-2
esm-infra/xenial

not-affected

2.1.0-7ubuntu0.16.04.4
focal

released

2.2.6-2

Показывать по

РелизСтатусПримечание
bionic

not-affected

cosmic

ignored

end of life
devel

not-affected

disco

ignored

end of life
eoan

not-affected

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

not-affected

groovy

not-affected

hirsute

not-affected

Показывать по

РелизСтатусПримечание
bionic

not-affected

uses system expat
cosmic

not-affected

uses system expat
devel

not-affected

uses system expat
disco

not-affected

uses system expat
eoan

not-affected

uses system expat
esm-apps/bionic

not-affected

uses system expat
esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/xenial

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
bionic

not-affected

code-not-compiled
cosmic

not-affected

code-not-compiled
devel

not-affected

code-not-compiled
disco

not-affected

code-not-compiled
eoan

not-affected

code-not-compiled
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

code-not-compiled
esm-infra/focal

not-affected

code-not-compiled
esm-infra/xenial

not-affected

code-not-compiled
focal

not-affected

code-not-compiled

Показывать по

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-apps/xenial

needs-triage

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

uses system expat
cosmic

not-affected

uses system expat
devel

DNE

disco

not-affected

uses system expat
eoan

not-affected

uses system expat
esm-apps/bionic

not-affected

uses system expat
esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/xenial

needed

esm-infra-legacy/trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

needed

esm-apps/bionic

released

1.2-4ubuntu0.18.04.1~esm4
esm-apps/focal

released

1.2-4ubuntu0.20.04.1~esm4
esm-apps/jammy

released

1.2-4ubuntu0.22.04.1~esm4
esm-apps/noble

released

1.2-4.1ubuntu2.24.0.4.1+esm2
esm-apps/xenial

released

1.2-3ubuntu0.16.04.1~esm2
focal

ignored

end of standard support, was needed
hirsute

ignored

end of life
impish

ignored

end of life

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

ignored

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

ignored

esm-apps/focal

ignored

esm-apps/jammy

ignored

esm-apps/noble

ignored

esm-apps/xenial

ignored

Показывать по

РелизСтатусПримечание
bionic

not-affected

uses system expat
cosmic

not-affected

uses system expat
devel

not-affected

uses system expat
disco

not-affected

uses system expat
eoan

not-affected

uses system expat
esm-apps/bionic

not-affected

uses system expat
esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/xenial

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
bionic

not-affected

uses system expat
cosmic

not-affected

uses system expat
devel

not-affected

uses system expat
disco

not-affected

uses system expat
eoan

not-affected

uses system expat
esm-apps/bionic

not-affected

uses system expat
esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/xenial

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
bionic

not-affected

uses system expat
cosmic

not-affected

uses system expat
devel

needs-triage

disco

not-affected

uses system expat
eoan

not-affected

uses system expat
esm-apps/bionic

not-affected

uses system expat
esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/xenial

not-affected

uses system expat
esm-infra-legacy/trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

code-not-compiled
cosmic

not-affected

code-not-compiled
devel

DNE

disco

not-affected

code-not-compiled
eoan

not-affected

code-not-compiled
esm-apps/bionic

not-affected

code-not-compiled
esm-apps/xenial

not-affected

code-not-compiled
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

needs-triage

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/xenial

needs-triage

Показывать по

РелизСтатусПримечание
bionic

not-affected

uses system expat
cosmic

ignored

end of life
devel

not-affected

uses system expat
disco

not-affected

uses system expat
eoan

not-affected

uses system expat
esm-apps/bionic

not-affected

uses system expat
esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/xenial

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
bionic

not-affected

code-not-compiled
cosmic

not-affected

code-not-compiled
devel

not-affected

code-not-compiled
disco

not-affected

code-not-compiled
eoan

not-affected

code-not-compiled
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

code-not-compiled
esm-infra/focal

not-affected

code-not-compiled
esm-infra/xenial

not-affected

code-not-compiled
focal

not-affected

code-not-compiled

Показывать по

РелизСтатусПримечание
bionic

not-affected

cosmic

ignored

end of life
devel

not-affected

disco

ignored

end of life
eoan

not-affected

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

not-affected

groovy

not-affected

hirsute

not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

DNE

disco

not-affected

code not present
eoan

not-affected

code not present
esm-apps/bionic

needed

esm-apps/xenial

needed

esm-infra-legacy/trusty

needed

esm-infra/focal

DNE

focal

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-apps/xenial

released

5.10.1+dfsg-2.1ubuntu0.1~esm1
esm-infra-legacy/trusty

not-affected

5.8.0-14.1ubuntu3+esm1
esm-infra/focal

DNE

focal

DNE

groovy

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

uses system expat
cosmic

not-affected

uses system expat
devel

not-affected

uses system expat
disco

not-affected

uses system expat
eoan

not-affected

uses system expat
esm-apps/bionic

not-affected

uses system expat
esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/xenial

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

needs-triage

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/xenial

needs-triage

Показывать по

EPSS

Процентиль: 90%
0.05817
Низкий

7.8 High

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
около 6 лет назад

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).

CVSS3: 7.5
nvd
почти 6 лет назад

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).

CVSS3: 7.5
msrc
почти 5 лет назад

Описание отсутствует

CVSS3: 7.5
debian
почти 6 лет назад

In libexpat in Expat before 2.2.7, XML input including XML names that ...

suse-cvrf
почти 6 лет назад

Security update for expat

EPSS

Процентиль: 90%
0.05817
Низкий

7.8 High

CVSS2

7.5 High

CVSS3