libexpat project libexpat vulnerabilities and exploits

(subscribe to this query)

NA

Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat prior to 2.1.0 allows context-dependent malicious users to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expandi...

Libexpat Project Libexpat 2.0.0 Libexpat Project Libexpat 1.95.8 Libexpat Project Libexpat Libexpat Project Libexpat 1.95.5 Libexpat Project Libexpat 1.95.4 Libexpat Project Libexpat 1.95.7 Libexpat Project Libexpat 1.95.6 Libexpat Project Libexpat 1.95.2 Libexpat Project Libexpat 1.95.1 Apple Mac Os X

NA

readfilemap.c in expat prior to 2.1.0 allows context-dependent malicious users to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.

Apple Mac Os X 10.11.1 Apple Mac Os X 10.11.0 Libexpat Project Libexpat 2.0.0 Libexpat Project Libexpat 1.95.8 Libexpat Project Libexpat 1.95.7 Libexpat Project Libexpat 1.95.6 Libexpat Project Libexpat 1.95.5 Libexpat Project Libexpat 1.95.4 Libexpat Project Libexpat 1.95.2 Libexpat Project Libexpat 1.95.1 Libexpat Project Libexpat

5.5

CVSSv3

libexpat up to and including 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.

Libexpat Project Libexpat

5 Github repositories

7.5

CVSSv3

libexpat up to and including 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.

Libexpat Project Libexpat

6 Github repositories

7.5

CVSSv3

In libexpat prior to 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Libexpat Project Libexpat Python Python

8.1

CVSSv3

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete ...

Libexpat Project Libexpat Canonical Ubuntu Linux 12.04 Mcafee Policy Auditor Python Python

NA

expat 2.1.0 and previous versions does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote malicious users to cause a denial of service (resource consumption), send HTTP requests to intranet server...

Libexpat Project Libexpat Python Python Apple Ipados Apple Iphone Os Apple Macos Apple Watchos Apple Tvos

2 Github repositories

7.5

CVSSv3

XML External Entity vulnerability in libexpat 2.2.0 and previous versions (Expat XML Parser Library) allows malicious users to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

Libexpat Project Libexpat Python Python Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

8.1

CVSSv3

libexpat prior to 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

Libexpat Project Libexpat Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Fedora 37

9.8

CVSSv3

addBinding in xmlparse.c in Expat (aka libexpat) prior to 2.4.3 has an integer overflow.

Libexpat Project Libexpat Tenable Nessus Siemens Sinema Remote Connect Server Debian Debian Linux 10.0 Debian Debian Linux 11.0

1 Article

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook