Search CVE reports
41 – 50 of 72 results
Some fixes available 1 of 13
In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
24 affected packages
xmlrpc-c, vnc4, wbxml2, swish-e, insighttoolkit...
| Package | 16.04 LTS |
|---|---|
| xmlrpc-c | Needs evaluation |
| vnc4 | Needs evaluation |
| wbxml2 | Needs evaluation |
| swish-e | Needs evaluation |
| insighttoolkit | Needs evaluation |
| insighttoolkit4 | Needs evaluation |
| cadaver | Needs evaluation |
| ayttm | Needs evaluation |
| cableswig | Needs evaluation |
| coin3 | Needs evaluation |
| tdom | Needs evaluation |
| vtk | Needs evaluation |
| thunderbird | Ignored |
| apache2 | Not affected |
| apr-util | Not affected |
| cmake | Not affected |
| expat | Fixed |
| firefox | Ignored |
| gdcm | Not affected |
| ghostscript | Not affected |
| libxmltok | Not affected |
| matanza | Ignored |
| smart | Not affected |
| texlive-bin | Not affected |
Some fixes available 1 of 14
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
24 affected packages
ayttm, cableswig, cadaver, coin3, insighttoolkit...
| Package | 16.04 LTS |
|---|---|
| ayttm | Needs evaluation |
| cableswig | Needs evaluation |
| cadaver | Needs evaluation |
| coin3 | Needs evaluation |
| insighttoolkit | Needs evaluation |
| insighttoolkit4 | Needs evaluation |
| smart | Needs evaluation |
| swish-e | Needs evaluation |
| tdom | Needs evaluation |
| thunderbird | Ignored |
| vnc4 | Needs evaluation |
| vtk | Needs evaluation |
| wbxml2 | Needs evaluation |
| xmlrpc-c | Needs evaluation |
| apache2 | Not affected |
| apr-util | Not affected |
| cmake | Not affected |
| expat | Fixed |
| firefox | Ignored |
| gdcm | Not affected |
| ghostscript | Not affected |
| libxmltok | Not affected |
| matanza | Ignored |
| texlive-bin | Not affected |
Some fixes available 1 of 13
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
24 affected packages
xmlrpc-c, vnc4, wbxml2, swish-e, insighttoolkit...
| Package | 16.04 LTS |
|---|---|
| xmlrpc-c | Needs evaluation |
| vnc4 | Needs evaluation |
| wbxml2 | Needs evaluation |
| swish-e | Needs evaluation |
| insighttoolkit | Needs evaluation |
| insighttoolkit4 | Needs evaluation |
| cadaver | Needs evaluation |
| ayttm | Needs evaluation |
| cableswig | Needs evaluation |
| coin3 | Needs evaluation |
| tdom | Needs evaluation |
| vtk | Needs evaluation |
| thunderbird | Ignored |
| apache2 | Not affected |
| apr-util | Not affected |
| cmake | Not affected |
| expat | Fixed |
| firefox | Ignored |
| gdcm | Not affected |
| ghostscript | Not affected |
| libxmltok | Not affected |
| matanza | Ignored |
| smart | Not affected |
| texlive-bin | Not affected |
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
24 affected packages
xmlrpc-c, vnc4, wbxml2, swish-e, insighttoolkit...
| Package | 16.04 LTS |
|---|---|
| xmlrpc-c | Needs evaluation |
| vnc4 | Needs evaluation |
| wbxml2 | Needs evaluation |
| swish-e | Needs evaluation |
| insighttoolkit | Needs evaluation |
| insighttoolkit4 | Needs evaluation |
| cadaver | Needs evaluation |
| ayttm | Needs evaluation |
| cableswig | Needs evaluation |
| coin3 | Needs evaluation |
| tdom | Needs evaluation |
| vtk | Needs evaluation |
| thunderbird | Ignored |
| apache2 | Not affected |
| apr-util | Not affected |
| cmake | Not affected |
| expat | Not affected |
| firefox | Ignored |
| gdcm | Not affected |
| ghostscript | Not affected |
| libxmltok | Not affected |
| matanza | Ignored |
| smart | Not affected |
| texlive-bin | Not affected |
Some fixes available 1 of 13
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.
24 affected packages
xmlrpc-c, vnc4, wbxml2, swish-e, insighttoolkit...
| Package | 16.04 LTS |
|---|---|
| xmlrpc-c | Needs evaluation |
| vnc4 | Needs evaluation |
| wbxml2 | Needs evaluation |
| swish-e | Needs evaluation |
| insighttoolkit | Needs evaluation |
| insighttoolkit4 | Needs evaluation |
| cadaver | Needs evaluation |
| ayttm | Needs evaluation |
| cableswig | Needs evaluation |
| coin3 | Needs evaluation |
| tdom | Needs evaluation |
| vtk | Needs evaluation |
| thunderbird | Ignored |
| apache2 | Not affected |
| apr-util | Not affected |
| cmake | Not affected |
| expat | Fixed |
| firefox | Ignored |
| gdcm | Not affected |
| ghostscript | Not affected |
| libxmltok | Not affected |
| matanza | Ignored |
| smart | Not affected |
| texlive-bin | Not affected |
Some fixes available 8 of 9
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
24 affected packages
xmlrpc-c, vnc4, wbxml2, swish-e, insighttoolkit4...
| Package | 16.04 LTS |
|---|---|
| xmlrpc-c | Fixed |
| vnc4 | Not affected |
| wbxml2 | Not affected |
| swish-e | Fixed |
| insighttoolkit4 | Needs evaluation |
| ayttm | Fixed |
| cableswig | Fixed |
| vtk | Not affected |
| thunderbird | Ignored |
| apache2 | Not affected |
| apr-util | Not affected |
| cadaver | Not affected |
| cmake | Not affected |
| coin3 | Fixed |
| expat | Fixed |
| firefox | Ignored |
| gdcm | Not affected |
| ghostscript | Not affected |
| insighttoolkit | Fixed |
| libxmltok | Fixed |
| matanza | Ignored |
| smart | Not affected |
| tdom | Not affected |
| texlive-bin | Not affected |
Some fixes available 8 of 9
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
24 affected packages
xmlrpc-c, vnc4, swish-e, insighttoolkit4, ayttm...
| Package | 16.04 LTS |
|---|---|
| xmlrpc-c | Fixed |
| vnc4 | Not affected |
| swish-e | Fixed |
| insighttoolkit4 | Needs evaluation |
| ayttm | Fixed |
| cableswig | Fixed |
| vtk | Not affected |
| thunderbird | Ignored |
| apache2 | Not affected |
| apr-util | Not affected |
| cadaver | Not affected |
| cmake | Not affected |
| coin3 | Fixed |
| expat | Fixed |
| firefox | Ignored |
| gdcm | Not affected |
| ghostscript | Not affected |
| insighttoolkit | Fixed |
| libxmltok | Fixed |
| matanza | Ignored |
| smart | Not affected |
| tdom | Not affected |
| texlive-bin | Not affected |
| wbxml2 | Not affected |
Some fixes available 1 of 4
Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
24 affected packages
xmlrpc-c, wbxml2, swish-e, cadaver, coin3...
| Package | 16.04 LTS |
|---|---|
| xmlrpc-c | Not affected |
| wbxml2 | Vulnerable |
| swish-e | Not affected |
| cadaver | Not affected |
| coin3 | Vulnerable |
| tdom | Vulnerable |
| thunderbird | Ignored |
| apache2 | Not affected |
| apr-util | Not affected |
| ayttm | Not affected |
| cableswig | Not affected |
| cmake | Not affected |
| expat | Fixed |
| firefox | Ignored |
| gdcm | Not affected |
| ghostscript | Not affected |
| insighttoolkit | Not affected |
| insighttoolkit4 | Not affected |
| libxmltok | Not affected |
| matanza | Ignored |
| smart | Not affected |
| texlive-bin | Not affected |
| vnc4 | Not affected |
| vtk | Not affected |
Some fixes available 1 of 9
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
24 affected packages
xmlrpc-c, vnc4, wbxml2, swish-e, insighttoolkit...
| Package | 16.04 LTS |
|---|---|
| xmlrpc-c | Not affected |
| vnc4 | Vulnerable |
| wbxml2 | Vulnerable |
| swish-e | Not affected |
| insighttoolkit | Vulnerable |
| insighttoolkit4 | Vulnerable |
| cadaver | Not affected |
| cableswig | Needs evaluation |
| coin3 | Vulnerable |
| tdom | Vulnerable |
| vtk | Needs evaluation |
| thunderbird | Ignored |
| apache2 | Not affected |
| apr-util | Not affected |
| ayttm | Not affected |
| cmake | Not affected |
| expat | Fixed |
| firefox | Ignored |
| gdcm | Not affected |
| ghostscript | Not affected |
| libxmltok | Not affected |
| matanza | Not affected |
| smart | Not affected |
| texlive-bin | Not affected |
Some fixes available 2 of 14
storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
24 affected packages
xmlrpc-c, vnc4, wbxml2, swish-e, insighttoolkit...
| Package | 16.04 LTS |
|---|---|
| xmlrpc-c | Needs evaluation |
| vnc4 | Needs evaluation |
| wbxml2 | Needs evaluation |
| swish-e | Needs evaluation |
| insighttoolkit | Needs evaluation |
| insighttoolkit4 | Needs evaluation |
| cadaver | Needs evaluation |
| ayttm | Needs evaluation |
| cableswig | Needs evaluation |
| coin3 | Needs evaluation |
| tdom | Needs evaluation |
| vtk | Needs evaluation |
| apache2 | Not affected |
| apr-util | Not affected |
| cmake | Not affected |
| expat | Fixed |
| firefox | Ignored |
| gdcm | Not affected |
| ghostscript | Not affected |
| libxmltok | Fixed |
| matanza | Ignored |
| smart | Not affected |
| texlive-bin | Not affected |
| thunderbird | Ignored |