DSA-5085: -1 expat -- security update
Published Feb 22, 2022
·Updated
expat - security update
Other sources
Several vulnerabilities have been discovered in Expat, an XML parsing C library, which could result in denial of service or potentially the execution of arbitrary code, if a malformed XML file is processed.
Affected Software
2 affected components
debian/expat
debian/expat
Event History
Feb 22, 2022
Advisory Published
12:00 AM
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
What conditions are required for exploitation?
An attacker needs to cause a vulnerable Expat consumer to process a malformed XML file. The reported impact is denial of service and potentially arbitrary code execution.
2
Which systems are exposed?
Systems using the Debian expat package may be exposed when an application processes XML input that an attacker can supply or influence.