CVE-2016-0718
CVE-2016-0718
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
CVSS 9.8 · Critical · EPSS 13.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
expat Debian:12
- Affected ranges
- ECOSYSTEM: < 2.1.1-2
Update to 2.1.1-2
expat Debian:13
- Affected ranges
- ECOSYSTEM: < 2.1.1-2
Update to 2.1.1-2
expat Debian:14
- Affected ranges
- ECOSYSTEM: < 2.1.1-2
Update to 2.1.1-2
libxmltok Debian:12
- Versions
- 1.2-4
- 1.2-4.1
- 1.2-4.1~exp1
- 1.2-4.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
expat Ubuntu:14.04:LTS
- Versions
- 2.1.0-4
- 2.1.0-4ubuntu1
- 2.1.0-4ubuntu1.1
- Affected ranges
- ECOSYSTEM: < 2.1.0-4ubuntu1.2
Update to 2.1.0-4ubuntu1.2
firefox Ubuntu:14.04:LTS
- Versions
- 24.0+build1-0ubuntu1
- 25.0+build3-0ubuntu0.13.10.1
- 28.0~b2+build1-0ubuntu2
- 28.0+build1-0ubuntu1
- 28.0+build2-0ubuntu1
- 28.0+build2-0ubuntu2
- 29.0+build1-0ubuntu0.14.04.2
- 30.0+build1-0ubuntu0.14.04.3
- 31.0+build1-0ubuntu0.14.04.1
- 32.0+build1-0ubuntu0.14.04.1
- 32.0.3+build1-0ubuntu0.14.04.1
- 33.0+build2-0ubuntu0.14.04.1
- 34.0+build2-0ubuntu0.14.04.1
- 35.0+build3-0ubuntu0.14.04.2
- 35.0.1+build1-0ubuntu0.14.04.1
- 36.0+build2-0ubuntu0.14.04.4
- 36.0.1+build2-0ubuntu0.14.04.1
- 36.0.4+build1-0ubuntu0.14.04.1
- 37.0+build2-0ubuntu0.14.04.1
- 37.0.1+build1-0ubuntu0.14.04.1
- 37.0.2+build1-0ubuntu0.14.04.1
- 38.0+build3-0ubuntu0.14.04.1
- 39.0+build5-0ubuntu0.14.04.1
- 39.0.3+build2-0ubuntu0.14.04.1
- 40.0+build4-0ubuntu0.14.04.1
- 40.0+build4-0ubuntu0.14.04.4
- 40.0.3+build1-0ubuntu0.14.04.1
- 41.0+build3-0ubuntu0.14.04.1
- 41.0.1+build2-0ubuntu0.14.04.1
- 41.0.2+build2-0ubuntu0.14.04.1
- 42.0+build2-0ubuntu0.14.04.1
- 43.0+build1-0ubuntu0.14.04.1
- 43.0.4+build3-0ubuntu0.14.04.1
- 44.0+build3-0ubuntu0.14.04.1
- 44.0.1+build2-0ubuntu0.14.04.1
- 44.0.2+build1-0ubuntu0.14.04.1
- 45.0+build2-0ubuntu0.14.04.1
- 45.0.1+build1-0ubuntu0.14.04.2
- 45.0.2+build1-0ubuntu0.14.04.1
- 46.0+build5-0ubuntu0.14.04.2
- 46.0.1+build1-0ubuntu0.14.04.3
- 47.0+build3-0ubuntu0.14.04.1
- Affected ranges
- ECOSYSTEM: < 48.0+build2-0ubuntu0.14.04.1
Update to 48.0+build2-0ubuntu0.14.04.1
coin3 Ubuntu:Pro:14.04:LTS
- Versions
- 3.1.4~abc9f50-3
- 3.1.4~abc9f50-4
- 3.1.4~abc9f50-4ubuntu2
- 3.1.4~abc9f50-4ubuntu2+esm1
- 3.1.4~abc9f50-4ubuntu2+esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
vnc4 Ubuntu:Pro:14.04:LTS
- Versions
- 4.1.1+xorg4.3.0-37ubuntu5
- 4.1.1+xorg4.3.0-37ubuntu5.0.1
- 4.1.1+xorg4.3.0-37ubuntu5.0.2
- 4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xmlrpc-c Ubuntu:Pro:14.04:LTS
- Versions
- 1.16.33-3.2ubuntu3
- 1.33.06-0ubuntu1
- 1.33.06-0ubuntu1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
expat Ubuntu:16.04:LTS
- Versions
- 2.1.0-7
- Affected ranges
- ECOSYSTEM: < 2.1.0-7ubuntu0.16.04.1
Update to 2.1.0-7ubuntu0.16.04.1
firefox Ubuntu:16.04:LTS
- Versions
- 41.0.2+build2-0ubuntu1
- 42.0+build2-0ubuntu1
- 44.0+build3-0ubuntu2
- 44.0.1+build1-0ubuntu1
- 44.0.2+build1-0ubuntu1
- 45.0+build2-0ubuntu1
- 45.0.1+build1-0ubuntu1
- 45.0.2+build1-0ubuntu1
- 46.0+build5-0ubuntu0.16.04.2
- 46.0.1+build1-0ubuntu0.16.04.2
- 47.0+build3-0ubuntu0.16.04.1
- Affected ranges
- ECOSYSTEM: < 48.0+build2-0ubuntu0.16.04.1
Update to 48.0+build2-0ubuntu0.16.04.1
libxmltok Ubuntu:Pro:16.04:LTS
- Versions
- 1.2-3build3
- 1.2-3ubuntu0.16.04.1~esm1
- Affected ranges
- ECOSYSTEM: < 1.2-3ubuntu0.16.04.1~esm2
Update to 1.2-3ubuntu0.16.04.1~esm2
ayttm Ubuntu:Pro:16.04:LTS
- Versions
- 0.6.3-3build1
- 0.6.3-3ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
cableswig Ubuntu:Pro:16.04:LTS
- Versions
- 0.1.0+git20150808-1
- 0.1.0+git20150808-2
- 0.1.0+git20150808-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
cadaver Ubuntu:16.04:LTS
- Versions
- 0.23.3-2ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
coin3 Ubuntu:Pro:16.04:LTS
- Versions
- 3.1.4~abc9f50+dfsg1-1
- 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1
- 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit Ubuntu:Pro:16.04:LTS
- Versions
- 3.20.1+git20120521-6
- 3.20.1+git20120521-6build1
- 3.20.1+git20120521-6ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
matanza Ubuntu:16.04:LTS
- Versions
- 0.13+ds1-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
swish-e Ubuntu:Pro:16.04:LTS
- Versions
- 2.4.7-4
- 2.4.7-4build1
- 2.4.7-4ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
vnc4 Ubuntu:Pro:16.04:LTS
- Versions
- 4.1.1+xorg4.3.0-37.3ubuntu2
- 4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xmlrpc-c Ubuntu:Pro:16.04:LTS
- Versions
- 1.33.14-0.2ubuntu3
- 1.33.14-1ubuntu1
- 1.33.14-1ubuntu1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
cadaver Ubuntu:18.04:LTS
- Versions
- 0.23.3-2ubuntu3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
coin3 Ubuntu:Pro:18.04:LTS
- Versions
- 3.1.4~abc9f50+dfsg1-2
- 3.1.4~abc9f50+dfsg2-1
- 3.1.4~abc9f50+dfsg3-1
- 3.1.4~abc9f50+dfsg3-2
- 3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- http://rhn.redhat.com/errata/RHSA-2016-2824.html
- https://www.tenable.com/security/tns-2016-20
- http://www.securitytracker.com/id/1037705
- http://www.securitytracker.com/id/1036415
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.ubuntu.com/usn/USN-2983-1
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html
- http://support.eset.com/ca6333/
- http://www.securityfocus.com/bid/90729
- http://www.ubuntu.com/usn/USN-3044-1
- http://www.openwall.com/lists/oss-security/2016/05/17/12
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1236923
- http://seclists.org/fulldisclosure/2017/Feb/68
- https://security.gentoo.org/glsa/201701-21
- https://source.android.com/security/bulletin/2016-11-01.html
- http://www.debian.org/security/2016/dsa-3582
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1296102
- http://www.mozilla.org/security/announce/2016/mfsa2016-68.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-0718