AZL-44685
Dashboard / Vulnerabilities / AZL-44685
Summary: CVE-2009-3720 affecting package ogdi 4.1.1-3
Details: The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
References: https://nvd.nist.gov/vuln/detail/CVE-2009-3720
Affected packages
Package
Name: ogdi
Purl: pkg:rpm/azure-linux/ogdi
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
