p PatchFirst

ALPINE-CVE-2019-15903

ALPINE-CVE-2019-15903

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

CVSS 7.5 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • expat Alpine:v3.10

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.11

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.12

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.13

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.14

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.15

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.16

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.17

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.18

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.19

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.20

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.21

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.22

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.23

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.24

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.7

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.8

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • expat Alpine:v3.9

    Affected ranges
    • ECOSYSTEM: < 2.2.7-r1

    Update to 2.2.7-r1

  • python2 Alpine:v3.10

    Affected ranges
    • ECOSYSTEM: < 2.7.17-r0

    Update to 2.7.17-r0

  • python2 Alpine:v3.11

    Affected ranges
    • ECOSYSTEM: < 2.7.17-r0

    Update to 2.7.17-r0

  • python2 Alpine:v3.12

    Affected ranges
    • ECOSYSTEM: < 2.7.17-r0

    Update to 2.7.17-r0

  • python2 Alpine:v3.9

    Affected ranges
    • ECOSYSTEM: < 2.7.17-r0

    Update to 2.7.17-r0

Original sources

Check your server →