Описание
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | code-not-compiled |
| devel | not-affected | code-not-compiled |
| esm-infra-legacy/trusty | not-affected | code-not-compiled |
| esm-infra/bionic | not-affected | code-not-compiled |
| esm-infra/focal | not-affected | code-not-compiled |
| esm-infra/xenial | not-affected | code-not-compiled |
| focal | not-affected | code-not-compiled |
| impish | not-affected | code-not-compiled |
| jammy | not-affected | code-not-compiled |
| kinetic | not-affected | code-not-compiled |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | code-not-compiled |
| devel | not-affected | code-not-compiled |
| esm-infra-legacy/trusty | not-affected | code-not-compiled |
| esm-infra/bionic | not-affected | code-not-compiled |
| esm-infra/focal | not-affected | code-not-compiled |
| esm-infra/xenial | not-affected | code-not-compiled |
| focal | not-affected | code-not-compiled |
| impish | not-affected | code-not-compiled |
| jammy | not-affected | code-not-compiled |
| kinetic | not-affected | code-not-compiled |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-apps/xenial | needs-triage | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| impish | DNE | |
| jammy | DNE | |
| kinetic | DNE | |
| lunar | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-apps/xenial | needs-triage | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| impish | DNE | |
| jammy | DNE | |
| kinetic | DNE | |
| lunar | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | needs-triage | |
| esm-apps/jammy | needs-triage | |
| esm-apps/noble | needs-triage | |
| esm-apps/xenial | needs-triage | |
| esm-infra-legacy/trusty | DNE | |
| focal | ignored | end of standard support, was needs-triage |
| impish | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | code-not-compiled |
| devel | not-affected | code-not-compiled |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | code-not-compiled |
| esm-infra/focal | not-affected | code-not-compiled |
| esm-infra/xenial | not-affected | code-not-compiled |
| focal | not-affected | code-not-compiled |
| impish | not-affected | code-not-compiled |
| jammy | not-affected | code-not-compiled |
| kinetic | not-affected | code-not-compiled |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | not-affected | uses system expat |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | not-affected | uses system expat |
| esm-apps/jammy | not-affected | uses system expat |
| esm-apps/noble | not-affected | uses system expat |
| esm-apps/xenial | needs-triage | |
| esm-infra-legacy/trusty | needs-triage | |
| focal | not-affected | uses system expat |
| impish | not-affected | uses system expat |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 2.2.5-3ubuntu0.7 |
| devel | released | 2.4.5-2 |
| esm-infra-legacy/trusty | not-affected | 2.1.0-4ubuntu1.4+esm6 |
| esm-infra/bionic | not-affected | 2.2.5-3ubuntu0.7 |
| esm-infra/focal | not-affected | 2.2.9-1ubuntu0.4 |
| esm-infra/xenial | released | 2.1.0-7ubuntu0.16.04.5+esm5 |
| focal | released | 2.2.9-1ubuntu0.4 |
| impish | released | 2.4.1-2ubuntu0.3 |
| jammy | released | 2.4.5-2 |
| kinetic | released | 2.4.5-2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | released | 1:1snap1-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | ignored | end of standard support, was ignored [bundled deps handled by upstream in new versions] |
| impish | ignored | end of life |
| jammy | released | 1:1snap1-0ubuntu1 |
| kinetic | released | 1:1snap1-0ubuntu1 |
| lunar | released | 1:1snap1-0ubuntu1 |
| mantic | released | 1:1snap1-0ubuntu1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | uses system expat |
| devel | not-affected | uses system expat |
| esm-apps/bionic | not-affected | uses system expat |
| esm-apps/focal | not-affected | uses system expat |
| esm-apps/jammy | not-affected | uses system expat |
| esm-apps/noble | not-affected | uses system expat |
| esm-apps/xenial | not-affected | uses system expat |
| esm-infra-legacy/trusty | not-affected | uses system expat |
| focal | not-affected | uses system expat |
| impish | not-affected | uses system expat |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | code-not-compiled |
| devel | not-affected | code-not-compiled |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | code-not-compiled |
| esm-infra/focal | not-affected | code-not-compiled |
| esm-infra/xenial | not-affected | code-not-compiled |
| focal | not-affected | code-not-compiled |
| impish | not-affected | code-not-compiled |
| jammy | not-affected | code-not-compiled |
| kinetic | not-affected | code-not-compiled |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-apps/xenial | needs-triage | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| impish | DNE | |
| jammy | DNE | |
| kinetic | DNE | |
| lunar | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | uses system expat |
| devel | DNE | |
| esm-apps/bionic | not-affected | uses system expat |
| esm-apps/focal | not-affected | uses system expat |
| esm-apps/jammy | not-affected | uses system expat |
| esm-apps/xenial | needs-triage | |
| esm-infra-legacy/trusty | DNE | |
| focal | not-affected | uses system expat |
| impish | ignored | end of life |
| jammy | not-affected | uses system expat |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | code not present |
| devel | not-affected | code not present |
| esm-apps/bionic | not-affected | code not present |
| esm-apps/focal | not-affected | code not present |
| esm-apps/jammy | not-affected | code not present |
| esm-apps/noble | not-affected | code not present |
| esm-apps/xenial | not-affected | code not present |
| focal | not-affected | code not present |
| hirsute | ignored | end of life |
| impish | not-affected | code not present |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | ignored | |
| esm-apps/bionic | ignored | |
| esm-apps/focal | ignored | |
| esm-apps/jammy | ignored | |
| esm-apps/noble | ignored | |
| esm-apps/xenial | ignored | |
| esm-infra-legacy/trusty | DNE | |
| focal | ignored | |
| impish | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | code-not-compiled |
| devel | DNE | |
| esm-apps/bionic | not-affected | code-not-compiled |
| esm-apps/xenial | not-affected | code-not-compiled |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| impish | DNE | |
| jammy | DNE | |
| kinetic | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | needs-triage | |
| esm-apps/jammy | needs-triage | |
| esm-apps/noble | needs-triage | |
| esm-apps/xenial | needs-triage | |
| esm-infra-legacy/trusty | DNE | |
| focal | ignored | end of standard support, was needs-triage |
| impish | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | needs-triage | |
| esm-apps/jammy | needs-triage | |
| esm-apps/noble | needs-triage | |
| esm-apps/xenial | needs-triage | |
| esm-infra-legacy/trusty | DNE | |
| focal | ignored | end of standard support, was needs-triage |
| impish | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | code-not-compiled |
| devel | not-affected | code-not-compiled |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | code-not-compiled |
| esm-infra/focal | not-affected | code-not-compiled |
| esm-infra/xenial | not-affected | code-not-compiled |
| focal | not-affected | code-not-compiled |
| impish | not-affected | code-not-compiled |
| jammy | not-affected | code-not-compiled |
| kinetic | not-affected | code-not-compiled |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | ignored | bundled deps handled by upstream in new versions |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | ignored | end of standard support, was ignored [bundled deps handled by upstream in new versions] |
| impish | ignored | end of life |
| jammy | ignored | bundled deps handled by upstream in new versions |
| kinetic | ignored | end of life, was needs-triage |
| lunar | ignored | end of life, was ignored [bundled deps handled by upstream in new versions] |
| mantic | ignored | end of life, was ignored [bundled deps handled by upstream in new versions] |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | DNE | |
| esm-apps/bionic | needs-triage | |
| esm-apps/xenial | needs-triage | |
| esm-infra-legacy/trusty | needs-triage | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| impish | DNE | |
| jammy | DNE | |
| kinetic | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-apps/xenial | needs-triage | |
| esm-infra-legacy/trusty | needs-triage | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| impish | DNE | |
| jammy | DNE | |
| kinetic | DNE | |
| lunar | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | needs-triage | |
| esm-apps/jammy | needs-triage | |
| esm-apps/noble | needs-triage | |
| esm-apps/xenial | needs-triage | |
| esm-infra-legacy/trusty | DNE | |
| focal | ignored | end of standard support, was needs-triage |
| impish | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | needs-triage | |
| esm-apps/jammy | needs-triage | |
| esm-apps/noble | needs-triage | |
| esm-apps/xenial | needs-triage | |
| esm-infra-legacy/trusty | needs-triage | |
| focal | ignored | end of standard support, was needs-triage |
| impish | ignored | end of life |
Показывать по
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack ex ...
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3