UBUNTU-CVE-2019-15903
Dashboard / Vulnerabilities / UBUNTU-CVE-2019-15903
UBUNTU-CVE-2019-15903
Summary:
Details: In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
References: https://ubuntu.com/security/CVE-2019-15903, https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43, https://github.com/libexpat/libexpat/issues/317, https://github.com/libexpat/libexpat/pull/318, https://ubuntu.com/security/notices/USN-4132-1, https://ubuntu.com/security/notices/USN-4132-2, https://www.mozilla.org/en-US/security/advisories/mfsa2019-34/#CVE-2019-15903, https://ubuntu.com/security/notices/USN-4165-1, https://ubuntu.com/security/notices/USN-4202-1, https://ubuntu.com/security/notices/USN-4335-1, https://ubuntu.com/security/notices/USN-5455-1, https://ubuntu.com/security/notices/USN-4852-1, https://www.cve.org/CVERecord?id=CVE-2019-15903, https://ubuntu.com/security/notices/USN-7199-1
Affected packages
Package
Name: expat
Purl: pkg:deb/ubuntu/expat?arch=source&distro=trusty%2Fesm
Affected ranges
Type: ECOSYSTEM
Events:
