Поиск уязвимостей
Количество 38
Количество 38
BDU:2019-03643
Уязвимость библиотеки для анализа XML-файлов libexpat, связанная с неверным ограничением xml-ссылок на внешние объекты, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2019-2740
ALT-PU-2019-2740: package `poco` update to version 1.9.4-alt1
ALT-PU-2020-2053
ALT-PU-2020-2053: package `expat` update to version 2.2.9-alt1
ALT-PU-2020-1434
ALT-PU-2020-1434: package `python3` update to version 3.8.1-alt1
ALT-PU-2019-3056
ALT-PU-2019-3056: package `firefox-esr` update to version 68.2.0-alt1
CVE-2019-15903
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
CVE-2019-15903
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
CVE-2019-15903
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
CVE-2019-15903
In libexpat before 2.2.8 crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
CVE-2019-15903
In libexpat before 2.2.8, crafted XML input could fool the parser into ...
ALT-PU-2019-3103
ALT-PU-2019-3103: package `python` update to version 2.7.17-alt1
ALT-PU-2019-3087
ALT-PU-2019-3087: package `firefox` update to version 70.0.1-alt1
openSUSE-SU-2019:2205-1
Security update for expat
openSUSE-SU-2019:2204-1
Security update for expat
SUSE-SU-2019:2440-1
Security update for expat
SUSE-SU-2019:2429-1
Security update for expat
GHSA-w829-6hpw-frjf
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
ALT-PU-2019-3112
ALT-PU-2019-3112: package `chromium` update to version 78.0.3904.97-alt1
RLSA-2020:4484
Moderate: expat security update
ELSA-2020-4484
ELSA-2020-4484: expat security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2019-03643 Уязвимость библиотеки для анализа XML-файлов libexpat, связанная с неверным ограничением xml-ссылок на внешние объекты, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 7% Низкий | около 7 лет назад |
| ALT-PU-2019-2740 ALT-PU-2019-2740: package `poco` update to version 1.9.4-alt1 | CVSS3: 7.5 | 7% Низкий | около 7 лет назад |
| ALT-PU-2020-2053 ALT-PU-2020-2053: package `expat` update to version 2.2.9-alt1 | CVSS3: 7.5 | больше 6 лет назад | |
| ALT-PU-2020-1434 ALT-PU-2020-1434: package `python3` update to version 3.8.1-alt1 | CVSS3: 7.8 | больше 6 лет назад | |
| ALT-PU-2019-3056 ALT-PU-2019-3056: package `firefox-esr` update to version 68.2.0-alt1 | CVSS3: 8.8 | около 7 лет назад | |
 | CVE-2019-15903 In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read. | CVSS3: 7.5 | 7% Низкий | около 7 лет назад |
 | CVE-2019-15903 In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read. | CVSS3: 7.5 | 7% Низкий | около 7 лет назад |
 | CVE-2019-15903 In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read. | CVSS3: 7.5 | 7% Низкий | около 7 лет назад |
 | CVE-2019-15903 In libexpat before 2.2.8 crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read. | CVSS3: 7.5 | 7% Низкий | почти 5 лет назад |
| CVE-2019-15903 In libexpat before 2.2.8, crafted XML input could fool the parser into ... | CVSS3: 7.5 | 7% Низкий | около 7 лет назад |
| ALT-PU-2019-3103 ALT-PU-2019-3103: package `python` update to version 2.7.17-alt1 | CVSS3: 9.8 | около 7 лет назад | |
| ALT-PU-2019-3087 ALT-PU-2019-3087: package `firefox` update to version 70.0.1-alt1 | CVSS3: 10 | около 7 лет назад | |
 | openSUSE-SU-2019:2205-1 Security update for expat | 7% Низкий | около 7 лет назад | |
| openSUSE-SU-2019:2204-1 Security update for expat | 7% Низкий | около 7 лет назад | |
| SUSE-SU-2019:2440-1 Security update for expat | 7% Низкий | около 7 лет назад | |
| SUSE-SU-2019:2429-1 Security update for expat | 7% Низкий | около 7 лет назад | |
| GHSA-w829-6hpw-frjf In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read. | CVSS3: 7.5 | 7% Низкий | больше 4 лет назад |
| ALT-PU-2019-3112 ALT-PU-2019-3112: package `chromium` update to version 78.0.3904.97-alt1 | CVSS3: 8.8 | почти 7 лет назад | |
 | RLSA-2020:4484 Moderate: expat security update | около 6 лет назад | ||
| ELSA-2020-4484 ELSA-2020-4484: expat security update (MODERATE) | почти 6 лет назад |
Уязвимостей на страницу