USN-4040-2: Expat vulnerability

Published Jun 26, 2019

Updated

USN-4040-1 fixed a vulnerability in expat. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Expat incorrectly handled certain XML files. An attacker could possibly use this issue to cause a denial of service.

Affected Software

1 affected component

Expat Expat

Event History

May 14, 2025

Advisory Published

via Ubuntu·04:09 AM

Data Sourced

via Ubuntu·04:09 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2018-20843

Frequently Asked Questions

What is the vulnerability ID for this security update?

The vulnerability ID for this security update is USN-4040-2.

What software is affected by this vulnerability?

The software affected by this vulnerability is libexpat1 and lib64expat1 on Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

What is the severity of this vulnerability?

The severity of this vulnerability is not mentioned in the provided information.

How can I fix this vulnerability?

To fix this vulnerability, you should update the libexpat1 and lib64expat1 packages to version 2.1.0-4ubuntu1.4+esm1 on Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Where can I find more information about this vulnerability?

You can find more information about this vulnerability on the Ubuntu Security Notices page with reference USN-4040-1.