Description
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | libxmltok | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | vnc4 +2 | No fix yet | — |
| Ubuntu 16.04 LTS | cmake +1 | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | apache2 +4 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | vnc4 +5 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | vnc4 +3 | No fix yet | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | expat | 2.2.0-3.1 | openSUSE-SU-2024:10077-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | xmlrpc-c | No fix yet | — |
Advisories 1
- openSUSE-SU-2024:10077-1 expat-2.2.0-3.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://support.apple.com/HT205637
- 1034344 vdb-entry
- 52379 vdb-entry
- http://sourceforge.net/projects/expat/files/expat/2.1.0/
- http://expat.cvs.sourceforge.net/viewvc/expat/expat/xmlwf/readfilemap.c?r1=1.14&r2=1.15
- APPLE-SA-2015-12-08-3 vendor-advisory
- http://sourceforge.net/tracker/?func=detail&aid=2895533&group_id=10127&atid=110127
- http://trac.wxwidgets.org/ticket/11432
- http://trac.wxwidgets.org/ticket/11194