- Vulnerability/
- USN-2726-1
USN-2726-1: Expat vulnerability
First published: Mon Aug 31 2015(Updated: )
It was discovered that Expat incorrectly handled malformed XML data. If a user or application linked against Expat were tricked into opening a crafted XML file, an attacker could cause a denial of service, or possibly execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/lib64expat1 | <2.1.0-6ubuntu1.1 | 2.1.0-6ubuntu1.1 |
| =15.04 | ||
| All of | ||
| ubuntu/libexpat1 | <2.1.0-6ubuntu1.1 | 2.1.0-6ubuntu1.1 |
| =15.04 | ||
| All of | ||
| ubuntu/lib64expat1 | <2.1.0-4ubuntu1.1 | 2.1.0-4ubuntu1.1 |
| =14.04 | ||
| All of | ||
| ubuntu/libexpat1 | <2.1.0-4ubuntu1.1 | 2.1.0-4ubuntu1.1 |
| =14.04 | ||
| All of | ||
| ubuntu/lib64expat1 | <2.0.1-7.2ubuntu1.2 | 2.0.1-7.2ubuntu1.2 |
| =12.04 | ||
| All of | ||
| ubuntu/libexpat1 | <2.0.1-7.2ubuntu1.2 | 2.0.1-7.2ubuntu1.2 |
| =12.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2015-1283
- https://ubuntu.com/security/notices/USN-3013-1
- https://ubuntu.com/security/notices/USN-2677-1
- https://ubuntu.com/security/notices/USN-4772-1
- https://ubuntu.com/security/notices/USN-5455-1
- https://launchpad.net/ubuntu/+source/expat/2.1.0-6ubuntu1.1
- https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.1
- https://launchpad.net/ubuntu/+source/expat/2.0.1-7.2ubuntu1.2
- https://ubuntu.com/security/notices/USN-2726-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is USN-2726-1.
What is the title of this vulnerability?
The title of this vulnerability is USN-2726-1: Expat vulnerability.
What is the description of this vulnerability?
This vulnerability in Expat allows attackers to cause a denial of service or possibly execute arbitrary code.
Which software is affected by this vulnerability?
The software affected by this vulnerability is Ubuntu 15.04, 14.04, 12.04.
What is the remedy for this vulnerability?
The remedy for this vulnerability is to update to version 2.1.0-6ubuntu1.1 for libexpat1 and lib64expat1 packages.
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/type
- agent/softwarecombine
- collector/usn
- source/Ubuntu
- anchor-related/USN-3013-1
- anchor-related/USN-2677-1
- anchor-related/USN-4772-1
- anchor-related/USN-5455-1
- agent/software-canonical-lookup
- agent/title
- agent/references
- agent/tags
- agent/description
- agent/event
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/15.04
- version/ubuntu ubuntu/14.04
- version/ubuntu ubuntu/12.04