Summary
Gustavo Grieco discovered that Expat incorrectly handled malformed XML
data. If a user or application linked against Expat were tricked into
opening a crafted XML file, an attacker could cause a denial of service, or
possibly execute arbitrary code. (CVE-2016-0718)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | expat | 2.1.0-4ubuntu1.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | expat | 2.1.0-7ubuntu0.16.04.1 |
Vulnerabilities 1
-
Unscored —CVE-2016-0718 EPSS 13%
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a …
References
-
report
https://ubuntu.com/security/CVE-2016-0718