CVE Feed

    Dashboard / CVE / CVE-2019-15903

    CVE-2019-15903

    In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

    Published:Sep 4, 2019
    Last Modified:May 30, 2025
    EPS:Sep 4, 2019
    EPSS Score:0.00361
    CVSS Score:6.5

    Affected Products

    Vendor
    Libexpat Project
    Product
    Libexpat
    Vendor
    Python
    Product
    Python
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Jboss Core Services
    Vendor
    Redhat
    Product
    Openshift Do

    Exploits

    https://github.com/libexpat/libexpat/issues/317https://github.com/libexpat/libexpat/issues/317

    Related CVEs

    CVE-2026-76957 (CVSS 4.9) — libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free…
    CVE-2026-76956 (CVSS 5.9) — In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient …
    CVE-2026-66046 (CVSS 8.7) — Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in t…
    CVE-2026-72522 (CVSS 6.2) — libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated…
    CVE-2026-56412 (CVSS 4.9) — libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth…
    CVE-2026-56411 (CVSS 6.9) — xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.…
    CVE-2026-56410 (CVSS 6.9) — xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.…
    CVE-2026-56409 (CVSS 6.5) — xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.…
    CVE-2026-56408 (CVSS 6.9) — libexpat before 2.8.2 has an integer overflow in copyString.…
    CVE-2026-56407 (CVSS 6.9) — libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textL…

    References

    http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html
    http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html
    http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html
    http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
    http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html
    http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html
    http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html
    http://seclists.org/fulldisclosure/2019/Dec/23
    http://seclists.org/fulldisclosure/2019/Dec/26
    http://seclists.org/fulldisclosure/2019/Dec/27
    http://seclists.org/fulldisclosure/2019/Dec/30
    https://access.redhat.com/errata/RHSA-2019:3210
    https://access.redhat.com/errata/RHSA-2019:3237
    https://access.redhat.com/errata/RHSA-2019:3756
    https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43
    https://github.com/libexpat/libexpat/issues/317
    https://github.com/libexpat/libexpat/issues/342
    https://github.com/libexpat/libexpat/pull/318
    https://lists.debian.org/debian-lts-announce/2019/11/msg00006.html
    https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/
    https://seclists.org/bugtraq/2019/Dec/17
    https://seclists.org/bugtraq/2019/Dec/21
    https://seclists.org/bugtraq/2019/Dec/23
    https://seclists.org/bugtraq/2019/Nov/1
    https://seclists.org/bugtraq/2019/Nov/24
    https://seclists.org/bugtraq/2019/Oct/29
    https://seclists.org/bugtraq/2019/Sep/30
    https://seclists.org/bugtraq/2019/Sep/37
    https://security.gentoo.org/glsa/201911-08
    https://security.netapp.com/advisory/ntap-20190926-0004/
    https://support.apple.com/kb/HT210785
    https://support.apple.com/kb/HT210788
    https://support.apple.com/kb/HT210789
    https://support.apple.com/kb/HT210790
    https://support.apple.com/kb/HT210793
    https://support.apple.com/kb/HT210794
    https://support.apple.com/kb/HT210795
    https://usn.ubuntu.com/4132-1/
    https://usn.ubuntu.com/4132-2/
    https://usn.ubuntu.com/4165-1/
    https://usn.ubuntu.com/4202-1/
    https://usn.ubuntu.com/4335-1/
    https://www.debian.org/security/2019/dsa-4530
    https://www.debian.org/security/2019/dsa-4549
    https://www.debian.org/security/2019/dsa-4571
    https://www.oracle.com/security-alerts/cpuapr2020.html
    https://www.oracle.com/security-alerts/cpuoct2020.html
    https://www.tenable.com/security/tns-2021-11
    http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html
    http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html
    http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html
    http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
    http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html
    http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html
    http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html
    http://seclists.org/fulldisclosure/2019/Dec/23
    http://seclists.org/fulldisclosure/2019/Dec/26
    http://seclists.org/fulldisclosure/2019/Dec/27
    http://seclists.org/fulldisclosure/2019/Dec/30
    https://access.redhat.com/errata/RHSA-2019:3210
    https://access.redhat.com/errata/RHSA-2019:3237
    https://access.redhat.com/errata/RHSA-2019:3756
    https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43
    https://github.com/libexpat/libexpat/issues/317
    https://github.com/libexpat/libexpat/issues/342
    https://github.com/libexpat/libexpat/pull/318
    https://lists.debian.org/debian-lts-announce/2019/11/msg00006.html
    https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/
    https://seclists.org/bugtraq/2019/Dec/17
    https://seclists.org/bugtraq/2019/Dec/21
    https://seclists.org/bugtraq/2019/Dec/23
    https://seclists.org/bugtraq/2019/Nov/1
    https://seclists.org/bugtraq/2019/Nov/24
    https://seclists.org/bugtraq/2019/Oct/29
    https://seclists.org/bugtraq/2019/Sep/30
    https://seclists.org/bugtraq/2019/Sep/37
    https://security.gentoo.org/glsa/201911-08
    https://security.netapp.com/advisory/ntap-20190926-0004/
    https://support.apple.com/kb/HT210785
    https://support.apple.com/kb/HT210788
    https://support.apple.com/kb/HT210789
    https://support.apple.com/kb/HT210790
    https://support.apple.com/kb/HT210793
    https://support.apple.com/kb/HT210794
    https://support.apple.com/kb/HT210795
    https://usn.ubuntu.com/4132-1/
    https://usn.ubuntu.com/4132-2/
    https://usn.ubuntu.com/4165-1/
    https://usn.ubuntu.com/4202-1/
    https://usn.ubuntu.com/4335-1/
    https://www.debian.org/security/2019/dsa-4530
    https://www.debian.org/security/2019/dsa-4549
    https://www.debian.org/security/2019/dsa-4571
    https://www.oracle.com/security-alerts/cpuapr2020.html
    https://www.oracle.com/security-alerts/cpuoct2020.html
    https://www.tenable.com/security/tns-2021-11

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High