Skip to content
OpenAdvisories
Unscored CVE-2015-1283 EUVD-2015-1424GHSA-6w45-gwrj-v625

Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other pro…

Published Jul 23, 2015 · Updated Aug 6, 2024 · Assigned by Chrome

Package: ayttm Package: cableswig Package: cadaver Package: chromium-browser Package: coin3 Package: expat Package: expat Package: insighttoolkit Package: libxmltok Package: libxmltok Package: matanza Package: oxide-qt Package: sitecopy Package: swish-e Package: vnc4 Package: xmlrpc-c Ecosystem: Debian Ecosystem: Ubuntu

Description

Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 expat 2.1.0-7 —
Debian 13 expat 2.1.0-7 —
Debian 12 expat 2.1.0-7 —
Debian 12 libxmltok No fix yet —
Debian 8 chromium-browser 44.0.2403.89-1~deb8u1 DSA-3315-1
Debian 8 expat 2.1.0-6+deb8u1 DSA-3318-1
Debian 7 expat 2.1.0-1+deb7u2 DSA-3318-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Debian 6.0 expat 2.0.1-7+squeeze2 DLA-281-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 coin3 +5 No fix yet —
Ubuntu 26.04 LTS coin3 +4 No fix yet —
Ubuntu 25.10 coin3 +5 No fix yet —
Ubuntu 24.04 LTS coin3 +2 No fix yet —
Ubuntu 22.04 LTS coin3 +2 No fix yet —
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS coin3 +2 No fix yet —
Ubuntu 18.04 LTS vnc4 +2 No fix yet —
Ubuntu 16.04 LTS cadaver +1 No fix yet —
Ubuntu 14.04 LTS chromium-browser 44.0.2403.89-0ubuntu0.14.04.1.1095 —
Ubuntu 14.04 LTS expat 2.1.0-4ubuntu1.1 USN-2726-1
Ubuntu 14.04 LTS oxide-qt 1.8.4-0ubuntu0.14.04.2 USN-2677-1
Ubuntu Pro 26.04 LTS swish-e No fix yet —
Ubuntu Pro 24.04 LTS libxmltok 1.2-4.1ubuntu2.24.0.4.1+esm2 USN-7199-1
Ubuntu Pro 24.04 LTS swish-e +1 No fix yet —
Ubuntu Pro 22.04 LTS libxmltok 1.2-4ubuntu0.22.04.1~esm4 USN-7199-1, USN-5455-1
Ubuntu Pro 22.04 LTS swish-e +1 No fix yet —
Ubuntu Pro 20.04 LTS libxmltok 1.2-4ubuntu0.20.04.1~esm4 USN-7199-1, USN-5455-1
Ubuntu Pro 20.04 LTS swish-e +1 No fix yet —
Ubuntu Pro 18.04 LTS coin3 +2 No fix yet —
Ubuntu Pro 18.04 LTS libxmltok 1.2-4ubuntu0.18.04.1~esm4 USN-7199-1, USN-5455-1
Ubuntu Pro 16.04 LTS ayttm +5 No fix yet —
Ubuntu Pro 16.04 LTS libxmltok 1.2-3ubuntu0.16.04.1~esm2 USN-5455-1
Ubuntu Pro 16.04 LTS vnc4 4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1 USN-4772-1
Ubuntu Pro 14.04 LTS coin3 +1 No fix yet —
Ubuntu Pro 14.04 LTS vnc4 4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1 USN-4772-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 6 chromium-browser 44.0.2403.89-1.el6 RHSA-2015:1499

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP1 expat 2.1.0-17.1 SUSE-SU-2016:1508-1
SLES 12 expat 2.1.0-17.1 SUSE-SU-2016:1508-1
SLES 11 SP4 expat 2.0.1-88.38.1 SUSE-SU-2016:1512-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE Studio Onsite 1.3 expat 2.0.1-88.38.1 SUSE-SU-2016:1512-1
SLES for SAP 12 SP1 expat 2.1.0-17.1 SUSE-SU-2016:1508-1
SLES for SAP 12 expat 2.1.0-17.1 SUSE-SU-2016:1508-1
SLES for SAP 11 SP4 expat 2.0.1-88.38.1 SUSE-SU-2016:1512-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 55.0.2883.75-3.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10171-1
openSUSE Tumbleweed expat 2.2.0-3.1 openSUSE-SU-2024:10077-1

Advisories 15

References