DSA-5073: -1 expat -- security update
Published Feb 12, 2022
·Updated
expat - security update
Other sources
Several vulnerabilities have been discovered in Expat, an XML parsing C library, which could result in denial of service or potentially the execution of arbitrary code, if a malformed XML file is processed.
Affected Software
2 affected components
debian/expat
debian/expat
Event History
Feb 12, 2022
Advisory Published
12:00 AM
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
Who is exposed to these issues?
Systems using the Debian expat package are exposed when an application processes malformed XML input using the Expat XML parsing library.
2
What does an attacker need to exploit the vulnerabilities?
An attacker needs to cause a vulnerable application to process a malformed XML file. The reported impact includes denial of service and potentially arbitrary code execution.