p PatchFirst

CVE-2017-9233

CVE-2017-9233

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

CVSS 7.5 · High · EPSS 8.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • expat Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.2.1-1

    Update to 2.2.1-1

  • expat Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.2.1-1

    Update to 2.2.1-1

  • expat Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.2.1-1

    Update to 2.2.1-1

  • libxmltok Debian:12

    Versions
    • 1.2-4
    • 1.2-4.1
    • 1.2-4.1~exp1
    • 1.2-4.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • expat Ubuntu:14.04:LTS

    Versions
    • 2.1.0-4
    • 2.1.0-4ubuntu1
    • 2.1.0-4ubuntu1.1
    • 2.1.0-4ubuntu1.2
    • 2.1.0-4ubuntu1.3
    Affected ranges
    • ECOSYSTEM: < 2.1.0-4ubuntu1.4

    Update to 2.1.0-4ubuntu1.4

  • coin3 Ubuntu:Pro:14.04:LTS

    Versions
    • 3.1.4~abc9f50-3
    • 3.1.4~abc9f50-4
    • 3.1.4~abc9f50-4ubuntu2
    Affected ranges
    • ECOSYSTEM: < 3.1.4~abc9f50-4ubuntu2+esm1

    Update to 3.1.4~abc9f50-4ubuntu2+esm1

  • vnc4 Ubuntu:Pro:14.04:LTS

    Versions
    • 4.1.1+xorg4.3.0-37ubuntu5
    • 4.1.1+xorg4.3.0-37ubuntu5.0.1
    • 4.1.1+xorg4.3.0-37ubuntu5.0.2
    • 4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • expat Ubuntu:16.04:LTS

    Versions
    • 2.1.0-7
    • 2.1.0-7ubuntu0.16.04.1
    • 2.1.0-7ubuntu0.16.04.2
    Affected ranges
    • ECOSYSTEM: < 2.1.0-7ubuntu0.16.04.3

    Update to 2.1.0-7ubuntu0.16.04.3

  • coin3 Ubuntu:Pro:16.04:LTS

    Versions
    • 3.1.4~abc9f50+dfsg1-1
    Affected ranges
    • ECOSYSTEM: < 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1

    Update to 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1

  • cableswig Ubuntu:Pro:16.04:LTS

    Versions
    • 0.1.0+git20150808-1
    • 0.1.0+git20150808-2
    • 0.1.0+git20150808-2ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:16.04:LTS

    Versions
    • 4.8.1-1ubuntu3
    • 4.8.1-1ubuntu4
    • 4.8.2-3.1ubuntu1
    • 4.9.0-3ubuntu2
    • 4.9.0-4ubuntu1
    • 4.9.0-4ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • matanza Ubuntu:16.04:LTS

    Versions
    • 0.13+ds1-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • swish-e Ubuntu:Pro:16.04:LTS

    Versions
    • 2.4.7-4
    • 2.4.7-4build1
    • 2.4.7-4ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vnc4 Ubuntu:Pro:16.04:LTS

    Versions
    • 4.1.1+xorg4.3.0-37.3ubuntu2
    • 4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • coin3 Ubuntu:Pro:18.04:LTS

    Versions
    • 3.1.4~abc9f50+dfsg1-2
    • 3.1.4~abc9f50+dfsg2-1
    • 3.1.4~abc9f50+dfsg3-1
    • 3.1.4~abc9f50+dfsg3-2
    • 3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • matanza Ubuntu:18.04:LTS

    Versions
    • 0.13+ds1-5build1
    • 0.13+ds1-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • swish-e Ubuntu:Pro:18.04:LTS

    Versions
    • 2.4.7-5ubuntu1
    • 2.4.7-5ubuntu1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vnc4 Ubuntu:18.04:LTS

    Versions
    • 4.1.1+xorg4.3.0-37.3ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • matanza Ubuntu:20.04:LTS

    Versions
    • 0.13+ds1-6
    • 0.13+ds2-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • swish-e Ubuntu:Pro:20.04:LTS

    Versions
    • 2.4.7-6build1
    • 2.4.7-6build2
    • 2.4.7-6ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • matanza Ubuntu:22.04:LTS

    Versions
    • 0.13+ds2-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • swish-e Ubuntu:Pro:22.04:LTS

    Versions
    • 2.4.7-6build3
    • 2.4.7-6.1
    • 2.4.7-6.1build1
    • 2.4.7-6.1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • matanza Ubuntu:24.04:LTS

    Versions
    • 0.13+ds2-1
    • 0.13+ds2-1build1
    • 0.13+ds2-1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →