CVE-2019-20202
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to...
6.5 MediumFix available
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
1.08%Up 0.7 points since Apr 14, 2021
What each source reports
NVD Score used
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.
- Record
CVE-2019-20202- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-763
- Updated
- 2026-11-02
CVE List No score
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.
- Record
CVE-2019-20202- Updated
- 2026-11-02
EUVDEUVD-2019-10756 No score
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.
- Record
EUVD-2019-10756- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-94p7-57m2-58qh No score
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to...
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.
- Record
GHSA-94p7-57m2-58qh- Updated
- 2026-11-02
OSV
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.
- Record
CVE-2019-20202- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-20202
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.
- Record
DEBIAN-CVE-2019-20202- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 11 moreShow less
OSVUBUNTU-CVE-2019-20202
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.
- Record
UBUNTU-CVE-2019-20202- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2021-0580 No score
Updated netcdf packages fix security vulnerability
Multiple security issues found in ezXML, bundled in netcdf
- Record
MGASA-2021-0580- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:1505-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
This update was imported from the SUSE:SLE-15-SP2:Update update project.
- Record
openSUSE-SU-2021:1505-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:3804-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
openSUSE-SU-2021:3804-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:3805-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
openSUSE-SU-2021:3805-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:3815-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
openSUSE-SU-2021:3815-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:3873-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
openSUSE-SU-2021:3873-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:3804-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
SUSE-SU-2021:3804-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:3805-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
SUSE-SU-2021:3805-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:3815-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
SUSE-SU-2021:3815-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:3873-1 No score
Security update for netcdf
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Record
SUSE-SU-2021:3873-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mapcacheDebian:12 |
All versions, plus listed versions 1.14.0-11.14.0-21.14.0-2.1~exp11.14.0-31.14.0-3~exp1 Show 8 moreShow less1.14.0-3~exp21.14.0-41.14.1-11.14.1-1~bpo12+11.14.1-21.14.1-31.16.0-11.16.0-1~bpo13+1 |
None known |
mapcacheDebian:13 |
All versions, plus listed versions 1.14.1-31.16.0-11.16.0-1~bpo13+1 |
None known |
mapcacheDebian:14 |
All versions, plus listed versions 1.14.1-31.16.0-11.16.0-1~bpo13+1 |
None known |
netcdfDebian:12 |
before 1:4.9.0-1 | 1:4.9.0-1 |
netcdfDebian:13 |
before 1:4.9.0-1 | 1:4.9.0-1 |
netcdfDebian:14 |
before 1:4.9.0-1 | 1:4.9.0-1 |
netcdf-parallelDebian:12 |
before 1:4.9.0-1 | 1:4.9.0-1 |
netcdf-parallelDebian:13 |
before 1:4.9.0-1 | 1:4.9.0-1 |
netcdf-parallelDebian:14 |
before 1:4.9.0-1 | 1:4.9.0-1 |
scilabDebian:12 |
All versions, plus listed versions 2024.0.0+dfsg-12024.0.0+dfsg-22024.0.0+dfsg-32024.0.0+dfsg-42024.0.0+dfsg-5 Show 19 moreShow less2024.0.0+dfsg-62024.1.0+dfsg-12024.1.0+dfsg-22024.1.0+dfsg-32024.1.0+dfsg-42024.1.0+dfsg-52024.1.0+dfsg-62024.1.0+dfsg-72024.1.0+dfsg-82024.1.0+dfsg1-12024.1.0+dfsg1-22024.1.0+dfsg1-32024.1.0+dfsg1-46.1.1+dfsg2-106.1.1+dfsg2-66.1.1+dfsg2-76.1.1+dfsg2-7~exp06.1.1+dfsg2-86.1.1+dfsg2-9 |
None known |
Show 89 moreShow less
| Package | Affected | Fixed |
|---|---|---|
scilabDebian:13 |
All versions, plus listed versions 2024.1.0+dfsg-62024.1.0+dfsg-6+deb13u12024.1.0+dfsg-72024.1.0+dfsg-82024.1.0+dfsg1-12024.1.0+dfsg1-22024.1.0+dfsg1-32024.1.0+dfsg1-4 |
None known |
scilabDebian:14 |
before 2024.1.0+dfsg1-1, plus listed versions 2024.1.0+dfsg-62024.1.0+dfsg-72024.1.0+dfsg-8 |
2024.1.0+dfsg1-1 |
netcdfMageia:8 From an advisory covering 16 CVEs |
before 4.7.4-3.1.mga8 | 4.7.4-3.1.mga8 |
netcdf_4_6_1-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-mpich-hpcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-mvapich2-hpcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-openmpi2-hpcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-mpich-hpcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-mvapich2-hpcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_6_1-gnu-openmpi2-hpcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_7_3-gnu-hpcSUSE:Linux Enterprise Module for HPC 15 SP2 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-mpich-hpcSUSE:Linux Enterprise Module for HPC 15 SP2 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-mvapich2-hpcSUSE:Linux Enterprise Module for HPC 15 SP2 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-openmpi2-hpcSUSE:Linux Enterprise Module for HPC 15 SP2 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-openmpi3-hpcSUSE:Linux Enterprise Module for HPC 15 SP2 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_6_1-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-mpich-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-mvapich2-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-openmpi2-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-mpich-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-mvapich2-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-openmpi2-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_7_4-gnu-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-mpich-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-mvapich2-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi3-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi4-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-hpcSUSE:Linux Enterprise Module for Package Hub 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-mpich-hpcSUSE:Linux Enterprise Module for Package Hub 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-mvapich2-hpcSUSE:Linux Enterprise Module for Package Hub 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi3-hpcSUSE:Linux Enterprise Module for Package Hub 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi4-hpcSUSE:Linux Enterprise Module for Package Hub 15 SP3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
mapcacheUbuntu:16.04:LTS |
All versions, plus listed versions 1.4.0-31.4.0-4 |
None known |
navitUbuntu:16.04:LTS |
All versions, plus listed versions 0.5.0~svn5900+dfsg.1-10.5.0+dfsg.1-1build1 |
None known |
scilabUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 5.5.2-1ubuntu15.5.2-2ubuntu15.5.2-2ubuntu25.5.2-2ubuntu35.5.2-2ubuntu3+esm1 |
None known |
mapcacheUbuntu:18.04:LTS |
All versions, plus listed versions 1.6.0-21.6.1-1 |
None known |
navitUbuntu:18.04:LTS |
All versions, plus listed versions 0.5.0+dfsg.1-20.5.0+dfsg.1-2build1 |
None known |
scilabUbuntu:18.04:LTS |
All versions, plus listed versions 5.5.2-4ubuntu25.5.2-66.0.0-16.0.1-1ubuntu16.0.1-7ubuntu1~18.046.0.1-7ubuntu1~18.04.16.0.1-7ubuntu1~18.04.2 |
None known |
mapcacheUbuntu:20.04:LTS |
All versions, plus listed versions 1.8.0-11.8.0-1build21.10.0-1 |
None known |
navitUbuntu:20.04:LTS |
All versions, plus listed versions 0.5.3+dfsg.1-2build10.5.3+dfsg.1-2ubuntu10.5.3+dfsg.1-2ubuntu30.5.4+dfsg.1-10.5.4+dfsg.1-2 |
None known |
netcdfUbuntu:20.04:LTS |
All versions, plus listed versions 1:4.6.2-1build11:4.7.3-1 |
None known |
netcdf-parallelUbuntu:20.04:LTS |
All versions, plus listed versions 1:4.6.2-1 |
None known |
scilabUbuntu:20.04:LTS |
All versions, plus listed versions 6.0.2-0ubuntu26.0.2-0ubuntu36.0.2-1fakesync56.1.0+dfsg1-1ubuntu36.1.0+dfsg1-1ubuntu3.1 |
None known |
mapcacheUbuntu:22.04:LTS |
All versions, plus listed versions 1.10.0-2build11.10.0-2build31.12.0-1 |
None known |
navitUbuntu:22.04:LTS |
All versions, plus listed versions 0.5.5+dfsg.1-2build10.5.6+dfsg.1-1 |
None known |
netcdfUbuntu:22.04:LTS |
All versions, plus listed versions 1:4.7.4-1build11:4.8.1-1 |
None known |
netcdf-parallelUbuntu:22.04:LTS |
All versions, plus listed versions 1:4.7.4-11:4.8.1-2 |
None known |
scilabUbuntu:22.04:LTS |
All versions, plus listed versions 6.1.0+dfsg1-76.1.1+dfsg2-3ubuntu1 |
None known |
mapcacheUbuntu:24.04:LTS |
All versions, plus listed versions 1.14.0-21.14.0-2build11.14.0-2build21.14.0-4build11.14.0-4build2 |
None known |
navitUbuntu:24.04:LTS |
All versions, plus listed versions 0.5.6+dfsg.1-2build10.5.6+dfsg.1-2build30.5.6+dfsg.1-2build4 |
None known |
scilabUbuntu:24.04:LTS |
All versions, plus listed versions 6.1.1+dfsg2-96.1.1+dfsg2-9build16.1.1+dfsg2-102024.0.0+dfsg-52024.0.0+dfsg-5build22024.0.0+dfsg-5build3 |
None known |
mapcacheUbuntu:25.10 |
All versions, plus listed versions 1.14.1-1build11.14.1-3 |
None known |
navitUbuntu:25.10 |
All versions, plus listed versions 0.5.6+dfsg.1-40.5.6+dfsg.1-4build1 |
None known |
scilabUbuntu:25.10 |
All versions, plus listed versions 2024.1.0+dfsg-6build52024.1.0+dfsg-6ubuntu22024.1.0+dfsg-6ubuntu32024.1.0+dfsg-6ubuntu42024.1.0+dfsg-7ubuntu1 |
None known |
mapcacheUbuntu:26.10 |
All versions, plus listed versions 1.14.1-3build21.16.0-11.16.0-1build1 |
None known |
navitUbuntu:26.10 |
All versions, plus listed versions 0.5.6+dfsg.1-5build2 |
None known |
scilabUbuntu:26.10 |
All versions, plus listed versions 2024.1.0+dfsg1-22024.1.0+dfsg1-2build12024.1.0+dfsg1-32024.1.0+dfsg1-3build1 |
None known |
mapcacheUbuntu:26.04:LTS |
All versions, plus listed versions 1.14.1-31.14.1-3build11.14.1-3build2 |
None known |
navitUbuntu:26.04:LTS |
All versions, plus listed versions 0.5.6+dfsg.1-4build10.5.6+dfsg.1-50.5.6+dfsg.1-5build2 |
None known |
scilabUbuntu:26.04:LTS |
All versions, plus listed versions 2024.1.0+dfsg-7ubuntu12024.1.0+dfsg-82024.1.0+dfsg-8build22024.1.0+dfsg-8build32024.1.0+dfsg-8build4 Show 4 moreShow less2024.1.0+dfsg-8build52024.1.0+dfsg1-12024.1.0+dfsg1-1ubuntu12024.1.0+dfsg1-2 |
None known |
netcdf_4_7_3-gnu-hpcopenSUSE:Leap 15.2 From an advisory covering 16 CVEs |
before 4.7.3-lp152.2.6.1 | 4.7.3-lp152.2.6.1 |
netcdf_4_7_3-gnu-mpich-hpcopenSUSE:Leap 15.2 From an advisory covering 16 CVEs |
before 4.7.3-lp152.2.6.1 | 4.7.3-lp152.2.6.1 |
netcdf_4_7_3-gnu-mvapich2-hpcopenSUSE:Leap 15.2 From an advisory covering 16 CVEs |
before 4.7.3-lp152.2.6.1 | 4.7.3-lp152.2.6.1 |
netcdf_4_7_3-gnu-openmpi2-hpcopenSUSE:Leap 15.2 From an advisory covering 16 CVEs |
before 4.7.3-lp152.2.6.1 | 4.7.3-lp152.2.6.1 |
netcdf_4_7_3-gnu-openmpi3-hpcopenSUSE:Leap 15.2 From an advisory covering 16 CVEs |
before 4.7.3-lp152.2.6.1 | 4.7.3-lp152.2.6.1 |
netcdfopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf-openmpiopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-5.7.1 | 4.6.1-5.7.1 |
netcdf_4_7_3-gnu-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-mpich-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-mvapich2-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-openmpi2-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_7_3-gnu-openmpi3-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.3-3.7.2 | 4.7.3-3.7.2 |
netcdf_4_6_1-gnu-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-mpich-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-mvapich2-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-openmpi1-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdf_4_6_1-gnu-openmpi2-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.6.1-10.7.2 | 4.6.1-10.7.2 |
netcdfopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf-openmpi2openSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf-openmpi3openSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf-openmpi4openSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-mpich-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-mvapich2-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi2-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi3-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
netcdf_4_7_4-gnu-openmpi4-hpcopenSUSE:Leap 15.3 From an advisory covering 16 CVEs |
before 4.7.4-4.3.2 | 4.7.4-4.3.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-20202 is a medium vulnerability (CVSS 6.5) in Ezxml Project Ezxml, published December 31, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.08%, the 65th percentile. Fixed in netcdf 1:4.9.0-1.
References
sourceforge.net/p/ezxml/bugs/17
nvd.nist.gov/vuln/detail/CVE-2019-20202
github.com/advisories/GHSA-94p7-57m2-58qh
security-tracker.debian.org/tracker/CVE-2019-20202
advisories.mageia.org/MGASA-2021-0580.html
bugs.mageia.org/show_bug.cgi?id=29241
Show 30 moreShow less
debian.org/lts/security/2021/dla-2705
bugs.debian.org/cgi-bin/bugreport.cgi?bug=989360
lists.opensuse.org/archives/list/[email protected]/thread/DM4S3HXSBD3QQY6J6J2S4KVWTO63OS7U
suse.com/support/update/announcement/2021/suse-su-20213804-1
bugzilla.suse.com/1191856
ubuntu.com/security/CVE-2019-20202
cve.org/CVERecord?id=CVE-2019-20202