CVE-2019-15903
גבוהה 7.5
תיאור (מקור, אנגלית)
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
מדדים
- CVSS 3.1
-
7.5 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS — סבירות ניצול
- 7% (אחוזון 100) נכון ל-14/10/2026
- CWE
- CWE-125, CWE-776
מוצרים מושפעים
libexpat_project: libexpat; python: python
קישורים
- https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183… PatchThird Party Advisory
- https://github.com/libexpat/libexpat/pull/318 Issue TrackingPatchThird Party Advisory
- https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183… PatchThird Party Advisory
- https://github.com/libexpat/libexpat/pull/318 Issue TrackingPatchThird Party Advisory
- https://github.com/libexpat/libexpat/issues/317 ExploitIssue TrackingThird Party Advisory
- https://github.com/libexpat/libexpat/issues/317 ExploitIssue TrackingThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html Mailing ListThird Party Advisory