Yüksek CVSS 8.1
CVE-2016-4472: Libexpat: güvenlik açığı
Açıklama (NVD)
The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.
Özet bilgiler
- Ürün
- Libexpat Project Libexpat
- CVSS v3.1
- 8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %11,95 (yüzdelik 96)
- CWE
- CWE-119
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| libexpat-project-libexpat | — | 2.1.1 | — |
| canonical-ubuntu-linux | 12.04 | 12.04 | — |
| mcafee-policy-auditor | — | — | 6.5.1 |
| python-python | 2.7.0 | — | 2.7.15 |
| python-python | 3.3.0 | — | 3.3.7 |
| python-python | 3.4.0 | — | 3.4.7 |
| python-python | 3.5.0 | — | 3.5.4 |
| python-python | 3.6.0 | — | 3.6.2 |