Summary
It was discovered that Expat incorrectly handled certain external entities.
A remote attacker could possibly use this issue to cause Expat to hang,
resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | expat | 2.1.0-4ubuntu1.4 |
| Ubuntu · 16.04 LTS 16.04:LTS | expat | 2.1.0-7ubuntu0.16.04.3 |
Vulnerabilities 1
-
Unscored —
XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the …
References
-
report
https://ubuntu.com/security/CVE-2017-9233