Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-expat | Aug 30, 2017 | May 26, 2016 | |
| Amazon_linux | — | amazon-linux-upgrade-expat | Dec 16, 2016 | May 26, 2016 |
| Apple Itunes | apple-itunes-upgrade-latest | Mar 24, 2017 | May 26, 2016 | |
| Apple Osx Libexpat | apple-osx-upgrade-latest | Nov 11, 2016 | May 26, 2016 | |
| Centos_linux | — | centos-upgrade-expatcentos-upgrade-expat-devel | Jan 27, 2017 | May 26, 2016 |
| Debian | debian-upgrade-expat | May 18, 2016 | May 18, 2016 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Sep 18, 2017 | |
| Freebsd | freebsd-upgrade-package-firefoxfreebsd-upgrade-package-seamonkeyfreebsd-upgrade-package-linux-seamonkeyfreebsd-upgrade-package-firefox-esrfreebsd-upgrade-package-linux-firefoxfreebsd-upgrade-package-libxulfreebsd-upgrade-package-thunderbirdfreebsd-upgrade-package-linux-thunderbirdfreebsd-upgrade-package-expatfreebsd-upgrade-package-linux-c6-expatfreebsd-upgrade-package-linux-c7-expatfreebsd-upgrade-package-python27 | Oct 11, 2017 | Sep 7, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-expat | Oct 30, 2017 | May 26, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-expathuawei-euleros-2_0_sp1-upgrade-expat-devel | Nov 30, 2017 | May 26, 2016 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-xulrunner | Jun 17, 2020 | May 26, 2016 | |
| Ibm Http_server | ibm-http_server-apply-interim-fix-pi73984-for-7_0ibm-http_server-apply-fix-pack-7_0_0_43ibm-http_server-apply-fix-pack-8_0_0_13 | Sep 7, 2022 | Sep 7, 2022 | |
| Mfsa2016 68 | mozilla-firefox-upgrade-48_0 | Aug 3, 2016 | May 26, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-expat-2-2-0-0-175-3-11-0-4-0 | May 29, 2017 | May 26, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-expatoracle-linux-upgrade-expat-develoracle-linux-upgrade-expat-static | Nov 28, 2016 | May 26, 2016 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-expatredhat-upgrade-expat-debuginforedhat-upgrade-expat-develredhat-upgrade-expat-static | Nov 28, 2016 | May 26, 2016 | |
| Suse | — | suse-upgrade-expatsuse-upgrade-libexpat-develsuse-upgrade-libexpat1suse-upgrade-libexpat1-32bitsuse-upgrade-libexpat1-x86suse-upgrade-libpython3_4m1_0suse-upgrade-libpython3_4m1_0-32bitsuse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-python3suse-upgrade-python3-basesuse-upgrade-python3-cursessuse-upgrade-python3-dbmsuse-upgrade-python3-develsuse-upgrade-python3-tksuse-upgrade-sles12-docker-imagesuse-upgrade-sles12sp1-docker-image | May 31, 2016 | May 26, 2016 |
| Ubuntu | ubuntu-pro-upgrade-libxmltok1ubuntu-pro-upgrade-libxmltok1t64ubuntu-upgrade-firefoxubuntu-upgrade-lib64expat1ubuntu-upgrade-libexpat1ubuntu-upgrade-libxmlrpc-c-4ubuntu-upgrade-libxmlrpc-core-c3ubuntu-upgrade-libxmltok1t64 | May 26, 2016 | May 26, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub