Summary
It was discovered that XML Security Library incorrectly handled certain
input documents. An attacker could possibly use this issue to obtain
sensitive information or cause a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | xmlsec1 | 1.2.20-2ubuntu4+esm1 |
Vulnerabilities 1
-
Unscored —
xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting…
References
-
report
https://ubuntu.com/security/CVE-2017-1000061