USN-2983-1: Expat vulnerability
Gustavo Grieco discovered that Expat incorrectly handled malformed XML data. If a user or application linked against Expat were tricked into opening a crafted XML file, an attacker could cause a denial of service, or possibly execute arbitrary code. (CVE-2016-0718)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the Expat vulnerability?
The vulnerability ID for the Expat vulnerability is CVE-2016-0718.
What is the affected software for the Expat vulnerability?
The affected software for the Expat vulnerability includes lib64expat1 and libexpat1 packages on Ubuntu 12.04, 14.04, 15.10, and 16.04.
What is the severity of the Expat vulnerability?
The severity of the Expat vulnerability is not mentioned in the provided information.
How can an attacker exploit the Expat vulnerability?
If a user or application linked against Expat were tricked into opening a crafted XML file, an attacker could cause a denial of service or possibly execute arbitrary code.
How do I fix the Expat vulnerability?
To fix the Expat vulnerability, update the lib64expat1 and libexpat1 packages to version 2.1.0-7ubuntu0.16.04.1 (or the appropriate version for your Ubuntu release).