Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade expat | Aug 30, 2017 | May 26, 2016 |
| Amazon_linux | — | Upgrade expat | Dec 16, 2016 | May 26, 2016 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Mar 24, 2017 | May 26, 2016 |
| Apple Osx Libexpat | — | Upgrade macOS to the latest version | Nov 11, 2016 | May 26, 2016 |
| Centos_linux | — | Upgrade expatUpgrade expat-devel | Jan 27, 2017 | May 26, 2016 |
| Debian | — | Upgrade expat | May 18, 2016 | May 18, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2017 |
| Freebsd | — | Upgrade libxulUpgrade linux-c7-expatUpgrade linux-firefoxUpgrade seamonkeyUpgrade linux-c6-expatUpgrade linux-thunderbirdUpgrade python27Upgrade firefox-esrUpgrade expatUpgrade linux-seamonkeyUpgrade firefoxUpgrade thunderbird | Oct 11, 2017 | Sep 7, 2016 |
| Gentoo Linux | — | Upgrade dev-libs/expat. | Oct 30, 2017 | May 26, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade expat-develUpgrade expat | Nov 30, 2017 | May 26, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xulrunner | Jun 17, 2020 | May 26, 2016 |
| Ibm Http_server | — | Apply IBM HTTP Server version 8.0.0.13 or laterApply IBM HTTP Server version 8.5.5.11 or laterApply IBM HTTP Server version 7.0.0.43 or laterApply IBM HTTP Server version 9.0.0.2 or laterApply IBM HTTP Server Interim Fix PI73984 | Sep 7, 2022 | Sep 7, 2022 |
| Mfsa2016 68 | — | Upgrade to Mozilla Firefox version 48.0Upgrade to the latest version of Mozilla Firefox | Aug 3, 2016 | May 26, 2016 |
| Oracle Solaris | — | Upgrade library/expat to version 2.2.0-0.175.3.11.0.4.0 on Solaris 11.3 | May 29, 2017 | May 26, 2016 |
| Oracle_linux | — | Upgrade expatUpgrade expat-develUpgrade expat-static | Nov 28, 2016 | May 26, 2016 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | May 17, 2016 |
| Redhat_linux | — | Upgrade expatNo solution existsUpgrade expat-develUpgrade expat-staticUpgrade expat-debuginfo | Nov 28, 2016 | May 26, 2016 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade python3-tkUpgrade sles12sp1-docker-imageUpgrade libpython3_4m1_0Upgrade MozillaFirefoxUpgrade libexpat-develUpgrade python3-cursesUpgrade sles12-docker-imageUpgrade python3-baseUpgrade libpython3_4m1_0-32bitUpgrade expatUpgrade libexpat1-32bitUpgrade MozillaFirefox-translations-otherUpgrade python3-develUpgrade MozillaFirefox-develUpgrade libexpat1Upgrade python3-dbmUpgrade libexpat1-x86Upgrade python3 | May 31, 2016 | May 26, 2016 |
| Ubuntu | — | Upgrade libexpat1Upgrade libxmlrpc-c++4Upgrade firefoxUpgrade libxmlrpc-core-c3Upgrade libxmltok1t64Upgrade libxmltok1 (Ubuntu Pro)Upgrade lib64expat1Upgrade libxmltok1t64 (Ubuntu Pro) | May 26, 2016 | May 26, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub