USN-2726-1: Expat vulnerability
Published Aug 31, 2015
·Updated
It was discovered that Expat incorrectly handled malformed XML data. If a user or application linked against Expat were tricked into opening a crafted XML file, an attacker could cause a denial of service, or possibly execute arbitrary code.
Affected Software
1 affected component
Expat Expat
Event History
May 10, 2025
Advisory Published
via Ubuntu·03:26 AM
Data Sourced
via Ubuntu·03:26 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is USN-2726-1.
2
What is the title of this vulnerability?
The title of this vulnerability is USN-2726-1: Expat vulnerability.
3
What is the description of this vulnerability?
This vulnerability in Expat allows attackers to cause a denial of service or possibly execute arbitrary code.
4
Which software is affected by this vulnerability?
The software affected by this vulnerability is Ubuntu 15.04, 14.04, 12.04.
5
What is the remedy for this vulnerability?
The remedy for this vulnerability is to update to version 2.1.0-6ubuntu1.1 for libexpat1 and lib64expat1 packages.