Summary
It was discovered that Expat, vendored in CableSwig, incorrectly handled
certain files. An attacker could possibly use this issue to cause a crash
or execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | cableswig | 0.1.0+git20150808-2ubuntu0.1~esm1 |
Vulnerabilities 2
-
Critical 9.8CVE-2022-25235 Public exploit
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a U…
-
Critical 9.8
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespac…