High USN-4040-1 1 CVE

expat vulnerability

Published Jun 26, 2019 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Expat incorrectly handled certain XML files.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	expat	2.1.0-7ubuntu0.16.04.4
Ubuntu · 18.04 LTS 18.04:LTS	expat	2.2.5-3ubuntu0.1

Vulnerabilities 1

High 7.5

CVE-2018-20843

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the X…

insighttoolkit4 expat swish-e matanza Debian Ubuntu Alpine

Jun 24, 2019

References

report
https://ubuntu.com/security/CVE-2018-20843