CVE-2009-3720
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python,...
5.0 MediumFix available
CVE-2009-3720 is a medium vulnerability (CVSS 5.0) in Libexpat Project Libexpat, published October 28, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 27.9%, the 98th percentile. Fixed in audacity 1.3.2-1.
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
Exploit likelihood
27.9%Up 22.2 points since Feb 4, 2022
What each source reports
NVD Score used
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
- Record
CVE-2009-3720- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
- Record
CVE-2009-3720- Updated
- 2026-11-02
EUVDEUVD-2009-3693 No score
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
- Record
EUVD-2009-3693- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pj3x-74qr-vrr4 No score
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python,...
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
- Record
GHSA-pj3x-74qr-vrr4- Updated
- 2026-11-02
OSVBELL-CVE-2009-3720
CVE-2009-3720 does not affect BellSoft software
- Record
BELL-CVE-2009-3720- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSVAZL-43945 No score
CVE-2009-3720 affecting package ogdi 4.1.0-9
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
- Record
AZL-43945- Updated
- 2026-11-02
Show 7 moreShow less
OSVAZL-44685 No score
CVE-2009-3720 affecting package ogdi 4.1.1-3
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
- Record
AZL-44685- Updated
- 2026-11-02
OSV No score
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
- Record
CVE-2009-3720- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-3720 No score
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
- Record
DEBIAN-CVE-2009-3720- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10077-1 No score
expat-2.2.0-3.1 on GA media
These are all security issues fixed in the expat-2.2.0-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10077-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10268-1 No score
apache2-2.4.23-4.1 on GA media
These are all security issues fixed in the apache2-2.4.23-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10268-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10568-1 No score
libapr-util1-1.5.4-4.4 on GA media
These are all security issues fixed in the libapr-util1-1.5.4-4.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10568-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2009-3720 No score
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
- Record
UBUNTU-CVE-2009-3720- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ogdiAzure Linux:2 |
through 4.1.0-9 | None known |
ogdiAzure Linux:3 |
through 4.1.1-3 | None known |
audacityDebian:12 |
before 1.3.2-1 | 1.3.2-1 |
audacityDebian:13 |
before 1.3.2-1 | 1.3.2-1 |
audacityDebian:14 |
before 1.3.2-1 | 1.3.2-1 |
cadaverDebian:12 |
All versions, plus listed versions 0.24+dfsg-10.24+dfsg-20.24+dfsg-30.24+dfsg-40.26+dfsg-10.26+dfsg-20.28+dfsg-10.28+dfsg-2 |
None known |
cadaverDebian:13 |
All versions, plus listed versions 0.26+dfsg-20.28+dfsg-10.28+dfsg-2 |
None known |
cadaverDebian:14 |
All versions, plus listed versions 0.26+dfsg-20.28+dfsg-10.28+dfsg-2 |
None known |
cmakeDebian:12 |
before 2.6.0-6 | 2.6.0-6 |
cmakeDebian:13 |
before 2.6.0-6 | 2.6.0-6 |
Show 187 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cmakeDebian:14 |
before 2.6.0-6 | 2.6.0-6 |
coin3Debian:12 |
before 4.0.0~CMake~6f54f1602475+ds1-1 | 4.0.0~CMake~6f54f1602475+ds1-1 |
coin3Debian:13 |
before 4.0.0~CMake~6f54f1602475+ds1-1 | 4.0.0~CMake~6f54f1602475+ds1-1 |
coin3Debian:14 |
before 4.0.0~CMake~6f54f1602475+ds1-1 | 4.0.0~CMake~6f54f1602475+ds1-1 |
expatDebian:12 |
before 2.0.1-5 | 2.0.1-5 |
expatDebian:13 |
before 2.0.1-5 | 2.0.1-5 |
expatDebian:14 |
before 2.0.1-5 | 2.0.1-5 |
gdcmDebian:12 |
before 2.0.14-2 | 2.0.14-2 |
gdcmDebian:13 |
before 2.0.14-2 | 2.0.14-2 |
gdcmDebian:14 |
before 2.0.14-2 | 2.0.14-2 |
ghostscriptDebian:12 |
before 8.71~dfsg-2 | 8.71~dfsg-2 |
ghostscriptDebian:13 |
before 8.71~dfsg-2 | 8.71~dfsg-2 |
ghostscriptDebian:14 |
before 8.71~dfsg-2 | 8.71~dfsg-2 |
libxmltokDebian:12 |
All versions, plus listed versions 1.2-41.2-4.11.2-4.1~exp11.2-4.2 |
None known |
matanzaDebian:12 |
All versions, plus listed versions 0.13+ds2-10.13+ds2-2 |
None known |
matanzaDebian:13 |
All versions, plus listed versions 0.13+ds2-2 |
None known |
matanzaDebian:14 |
All versions, plus listed versions 0.13+ds2-2 |
None known |
mcabberDebian:12 |
before 0.10.0-1 | 0.10.0-1 |
mcabberDebian:13 |
before 0.10.0-1 | 0.10.0-1 |
paraviewDebian:12 |
before 3.6.2-1 | 3.6.2-1 |
paraviewDebian:13 |
before 3.6.2-1 | 3.6.2-1 |
paraviewDebian:14 |
before 3.6.2-1 | 3.6.2-1 |
pocoDebian:12 |
before 1.3.6p1-1 | 1.3.6p1-1 |
pocoDebian:13 |
before 1.3.6p1-1 | 1.3.6p1-1 |
pocoDebian:14 |
before 1.3.6p1-1 | 1.3.6p1-1 |
simgearDebian:12 |
before 2.10.0-1 | 2.10.0-1 |
simgearDebian:13 |
before 2.10.0-1 | 2.10.0-1 |
simgearDebian:14 |
before 2.10.0-1 | 2.10.0-1 |
tdomDebian:12 |
before 0.8.3~20080525-1 | 0.8.3~20080525-1 |
tdomDebian:13 |
before 0.8.3~20080525-1 | 0.8.3~20080525-1 |
tdomDebian:14 |
before 0.8.3~20080525-1 | 0.8.3~20080525-1 |
tlaDebian:12 |
before 1.3.5+dfsg-15 | 1.3.5+dfsg-15 |
udunitsDebian:12 |
before 2.1.8-4 | 2.1.8-4 |
udunitsDebian:13 |
before 2.1.8-4 | 2.1.8-4 |
udunitsDebian:14 |
before 2.1.8-4 | 2.1.8-4 |
xmlrpc-cDebian:12 |
before 1.06.27-1.1 | 1.06.27-1.1 |
xmlrpc-cDebian:13 |
before 1.06.27-1.1 | 1.06.27-1.1 |
xmlrpc-cDebian:14 |
before 1.06.27-1.1 | 1.06.27-1.1 |
xotclDebian:12 |
before 1.6.5-1.2 | 1.6.5-1.2 |
xotclDebian:13 |
before 1.6.5-1.2 | 1.6.5-1.2 |
xotclDebian:14 |
before 1.6.5-1.2 | 1.6.5-1.2 |
expatDebian:4.0 |
before 1.95.8-3.4+etch1, plus listed versions 1.95.8-3.4 |
1.95.8-3.4+etch1 |
expatDebian:5.0 |
before 2.0.1-4+lenny1, plus listed versions 2.0.1-4 |
2.0.1-4+lenny1 |
python2.4Debian:4.0 |
before 2.4.4-3+etch3, plus listed versions 2.4.4-32.4.4-3+etch12.4.4-3+etch2 |
2.4.4-3+etch3 |
python2.5Debian:4.0 |
before 2.5-5+etch2, plus listed versions 2.5-52.5-5+etch1 |
2.5-5+etch2 |
python2.4Debian:5.0 |
before 2.4.6-1+lenny1, plus listed versions 2.4.6-1 |
2.4.6-1+lenny1 |
python2.5Debian:5.0 |
before 2.5.2-15+lenny1, plus listed versions 2.5.2-15 |
2.5.2-15+lenny1 |
4SuiteRed Hat:enterprise_linux:3::as |
before 0:0.11.1-15 | 0:0.11.1-15 |
4Suite-debuginfoRed Hat:enterprise_linux:3::as |
before 0:0.11.1-15 | 0:0.11.1-15 |
4SuiteRed Hat:enterprise_linux:3::desktop |
before 0:0.11.1-15 | 0:0.11.1-15 |
4Suite-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:0.11.1-15 | 0:0.11.1-15 |
4SuiteRed Hat:enterprise_linux:3::es |
before 0:0.11.1-15 | 0:0.11.1-15 |
4Suite-debuginfoRed Hat:enterprise_linux:3::es |
before 0:0.11.1-15 | 0:0.11.1-15 |
4SuiteRed Hat:enterprise_linux:3::ws |
before 0:0.11.1-15 | 0:0.11.1-15 |
4Suite-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:0.11.1-15 | 0:0.11.1-15 |
4SuiteRed Hat:enterprise_linux:4::as |
before 0:1.0-3.el4_8.1 | 0:1.0-3.el4_8.1 |
4Suite-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0-3.el4_8.1 | 0:1.0-3.el4_8.1 |
4SuiteRed Hat:enterprise_linux:4::desktop |
before 0:1.0-3.el4_8.1 | 0:1.0-3.el4_8.1 |
4Suite-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0-3.el4_8.1 | 0:1.0-3.el4_8.1 |
4SuiteRed Hat:enterprise_linux:4::es |
before 0:1.0-3.el4_8.1 | 0:1.0-3.el4_8.1 |
4Suite-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0-3.el4_8.1 | 0:1.0-3.el4_8.1 |
4SuiteRed Hat:enterprise_linux:4::ws |
before 0:1.0-3.el4_8.1 | 0:1.0-3.el4_8.1 |
4Suite-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0-3.el4_8.1 | 0:1.0-3.el4_8.1 |
expatRed Hat:enterprise_linux:3::as |
before 0:1.95.5-6.2 | 0:1.95.5-6.2 |
expat-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.95.5-6.2 | 0:1.95.5-6.2 |
expat-develRed Hat:enterprise_linux:3::as |
before 0:1.95.5-6.2 | 0:1.95.5-6.2 |
expatRed Hat:enterprise_linux:3::desktop |
before 0:1.95.5-6.2 | 0:1.95.5-6.2 |
expat-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.95.5-6.2 | 0:1.95.5-6.2 |
expat-develRed Hat:enterprise_linux:3::desktop |
before 0:1.95.5-6.2 | 0:1.95.5-6.2 |
expatRed Hat:enterprise_linux:3::es |
before 0:1.95.5-6.2 | 0:1.95.5-6.2 |
expat-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.95.5-6.2 | 0:1.95.5-6.2 |
expat-develRed Hat:enterprise_linux:3::es |
before 0:1.95.5-6.2 | 0:1.95.5-6.2 |
expatRed Hat:enterprise_linux:3::ws |
before 0:1.95.5-6.2 | 0:1.95.5-6.2 |
expat-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.95.5-6.2 | 0:1.95.5-6.2 |
expat-develRed Hat:enterprise_linux:3::ws |
before 0:1.95.5-6.2 | 0:1.95.5-6.2 |
expatRed Hat:enterprise_linux:4::as |
before 0:1.95.7-4.el4_8.2 | 0:1.95.7-4.el4_8.2 |
expat-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.95.7-4.el4_8.2 | 0:1.95.7-4.el4_8.2 |
expat-develRed Hat:enterprise_linux:4::as |
before 0:1.95.7-4.el4_8.2 | 0:1.95.7-4.el4_8.2 |
expatRed Hat:enterprise_linux:4::desktop |
before 0:1.95.7-4.el4_8.2 | 0:1.95.7-4.el4_8.2 |
expat-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.95.7-4.el4_8.2 | 0:1.95.7-4.el4_8.2 |
expat-develRed Hat:enterprise_linux:4::desktop |
before 0:1.95.7-4.el4_8.2 | 0:1.95.7-4.el4_8.2 |
expatRed Hat:enterprise_linux:4::es |
before 0:1.95.7-4.el4_8.2 | 0:1.95.7-4.el4_8.2 |
expat-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.95.7-4.el4_8.2 | 0:1.95.7-4.el4_8.2 |
expat-develRed Hat:enterprise_linux:4::es |
before 0:1.95.7-4.el4_8.2 | 0:1.95.7-4.el4_8.2 |
expatRed Hat:enterprise_linux:4::ws |
before 0:1.95.7-4.el4_8.2 | 0:1.95.7-4.el4_8.2 |
expat-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.95.7-4.el4_8.2 | 0:1.95.7-4.el4_8.2 |
expat-develRed Hat:enterprise_linux:4::ws |
before 0:1.95.7-4.el4_8.2 | 0:1.95.7-4.el4_8.2 |
expatRed Hat:enterprise_linux:5::client_workstation |
before 0:1.95.8-8.3.el5_4.2 | 0:1.95.8-8.3.el5_4.2 |
expat-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:1.95.8-8.3.el5_4.2 | 0:1.95.8-8.3.el5_4.2 |
expat-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.95.8-8.3.el5_4.2 | 0:1.95.8-8.3.el5_4.2 |
expatRed Hat:enterprise_linux:5::client |
before 0:1.95.8-8.3.el5_4.2 | 0:1.95.8-8.3.el5_4.2 |
expat-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.95.8-8.3.el5_4.2 | 0:1.95.8-8.3.el5_4.2 |
expatRed Hat:enterprise_linux:5::server |
before 0:1.95.8-8.3.el5_4.2 | 0:1.95.8-8.3.el5_4.2 |
expat-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.95.8-8.3.el5_4.2 | 0:1.95.8-8.3.el5_4.2 |
expat-develRed Hat:enterprise_linux:5::server |
before 0:1.95.8-8.3.el5_4.2 | 0:1.95.8-8.3.el5_4.2 |
PyXMLRed Hat:enterprise_linux:4::as |
before 0:0.8.3-6.el4_8.2 | 0:0.8.3-6.el4_8.2 |
PyXML-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.8.3-6.el4_8.2 | 0:0.8.3-6.el4_8.2 |
PyXMLRed Hat:enterprise_linux:4::desktop |
before 0:0.8.3-6.el4_8.2 | 0:0.8.3-6.el4_8.2 |
PyXML-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.8.3-6.el4_8.2 | 0:0.8.3-6.el4_8.2 |
PyXMLRed Hat:enterprise_linux:4::es |
before 0:0.8.3-6.el4_8.2 | 0:0.8.3-6.el4_8.2 |
PyXML-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.8.3-6.el4_8.2 | 0:0.8.3-6.el4_8.2 |
PyXMLRed Hat:enterprise_linux:4::ws |
before 0:0.8.3-6.el4_8.2 | 0:0.8.3-6.el4_8.2 |
PyXML-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.8.3-6.el4_8.2 | 0:0.8.3-6.el4_8.2 |
PyXMLRed Hat:enterprise_linux:5::client |
before 0:0.8.4-4.el5_4.2 | 0:0.8.4-4.el5_4.2 |
PyXML-debuginfoRed Hat:enterprise_linux:5::client |
before 0:0.8.4-4.el5_4.2 | 0:0.8.4-4.el5_4.2 |
PyXMLRed Hat:enterprise_linux:5::server |
before 0:0.8.4-4.el5_4.2 | 0:0.8.4-4.el5_4.2 |
PyXML-debuginfoRed Hat:enterprise_linux:5::server |
before 0:0.8.4-4.el5_4.2 | 0:0.8.4-4.el5_4.2 |
pythonRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-develRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-docsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-toolsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
tkinterRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
pythonRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-develRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-docsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-toolsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
tkinterRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
pythonRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-develRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-docsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-toolsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
tkinterRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
pythonRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-develRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-docsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-toolsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
tkinterRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
pythonRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-develRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
pythonRed Hat:enterprise_linux:5::client |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-libsRed Hat:enterprise_linux:5::client |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-toolsRed Hat:enterprise_linux:5::client |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
tkinterRed Hat:enterprise_linux:5::client |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
pythonRed Hat:enterprise_linux:5::server |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-develRed Hat:enterprise_linux:5::server |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-libsRed Hat:enterprise_linux:5::server |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-toolsRed Hat:enterprise_linux:5::server |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
tkinterRed Hat:enterprise_linux:5::server |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
coin3Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.1.4~abc9f50-33.1.4~abc9f50-43.1.4~abc9f50-4ubuntu23.1.4~abc9f50-4ubuntu2+esm13.1.4~abc9f50-4ubuntu2+esm2 |
None known |
cableswigUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 0.1.0+git20150808-10.1.0+git20150808-20.1.0+git20150808-2ubuntu0.1~esm1 |
None known |
cadaverUbuntu:16.04:LTS |
All versions, plus listed versions 0.23.3-2ubuntu2 |
None known |
coin3Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.1.4~abc9f50+dfsg1-13.1.4~abc9f50+dfsg1-1ubuntu0.1~esm13.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2 |
None known |
insighttoolkitUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.20.1+git20120521-63.20.1+git20120521-6build13.20.1+git20120521-6ubuntu0.1~esm1 |
None known |
matanzaUbuntu:16.04:LTS |
All versions, plus listed versions 0.13+ds1-5 |
None known |
swish-eUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.4.7-42.4.7-4build12.4.7-4ubuntu0.1~esm1 |
None known |
cadaverUbuntu:18.04:LTS |
All versions, plus listed versions 0.23.3-2ubuntu3 |
None known |
coin3Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 3.1.4~abc9f50+dfsg1-23.1.4~abc9f50+dfsg2-13.1.4~abc9f50+dfsg3-13.1.4~abc9f50+dfsg3-23.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1 |
None known |
matanzaUbuntu:18.04:LTS |
All versions, plus listed versions 0.13+ds1-5build10.13+ds1-6 |
None known |
swish-eUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.4.7-5ubuntu12.4.7-5ubuntu1+esm1 |
None known |
cadaverUbuntu:20.04:LTS |
All versions, plus listed versions 0.23.3-2.1build1 |
None known |
coin3Ubuntu:20.04:LTS |
All versions, plus listed versions 4.0.0~CMake~6f54f1602475+ds1-34.0.0+ds-1build1 |
None known |
matanzaUbuntu:20.04:LTS |
All versions, plus listed versions 0.13+ds1-60.13+ds2-1 |
None known |
swish-eUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.4.7-6build12.4.7-6build22.4.7-6ubuntu0.1~esm1 |
None known |
cadaverUbuntu:22.04:LTS |
All versions, plus listed versions 0.23.3-2.1build1 |
None known |
coin3Ubuntu:22.04:LTS |
All versions, plus listed versions 4.0.0+ds-1build14.0.0+ds-2 |
None known |
matanzaUbuntu:22.04:LTS |
All versions, plus listed versions 0.13+ds2-1 |
None known |
swish-eUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 2.4.7-6build32.4.7-6.12.4.7-6.1build12.4.7-6.1ubuntu0.1~esm1 |
None known |
cadaverUbuntu:24.04:LTS |
All versions, plus listed versions 0.24+dfsg-20.24+dfsg-30.24+dfsg-3build10.24+dfsg-3build2 |
None known |
coin3Ubuntu:24.04:LTS |
All versions, plus listed versions 4.0.0+ds-54.0.2+ds-14.0.2+ds-1.1ubuntu14.0.2+ds-1.1ubuntu2 |
None known |
matanzaUbuntu:24.04:LTS |
All versions, plus listed versions 0.13+ds2-10.13+ds2-1build10.13+ds2-1build2 |
None known |
swish-eUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 2.4.7-6.22.4.7-6.2build12.4.7-6.2build22.4.7-6.2build32.4.7-6.2ubuntu0.1~esm1 |
None known |
cadaverUbuntu:25.10 |
All versions, plus listed versions 0.26+dfsg-2 |
None known |
coin3Ubuntu:25.10 |
All versions, plus listed versions 4.0.3+ds-2 |
None known |
matanzaUbuntu:25.10 |
All versions, plus listed versions 0.13+ds2-2 |
None known |
sitecopyUbuntu:25.10 |
All versions, plus listed versions 1:0.16.6-161:0.16.6-16build1 |
None known |
swish-eUbuntu:25.10 |
All versions, plus listed versions 2.4.7-6.32.4.7-6.3build12.4.7-7 |
None known |
cadaverUbuntu:26.10 |
All versions, plus listed versions 0.28+dfsg-2 |
None known |
coin3Ubuntu:26.10 |
All versions, plus listed versions 4.0.6+ds-14.0.7+ds-1 |
None known |
matanzaUbuntu:26.10 |
All versions, plus listed versions 0.13+ds2-2build1 |
None known |
sitecopyUbuntu:26.10 |
All versions, plus listed versions 1:0.16.6-16build1 |
None known |
swish-eUbuntu:26.10 |
All versions, plus listed versions 2.4.7-7.12.4.7-7.22.4.7-7.2build1 |
None known |
cadaverUbuntu:26.04:LTS |
All versions, plus listed versions 0.26+dfsg-20.28+dfsg-10.28+dfsg-2 |
None known |
coin3Ubuntu:26.04:LTS |
All versions, plus listed versions 4.0.3+ds-24.0.6+ds-1 |
None known |
matanzaUbuntu:26.04:LTS |
All versions, plus listed versions 0.13+ds2-20.13+ds2-2build1 |
None known |
paraviewUbuntu:26.04:LTS |
All versions, plus listed versions 5.13.2+dfsg-35.13.2+dfsg-3ubuntu15.13.2+dfsg-3.16.0.1+dfsg1-6ubuntu16.0.1+dfsg1-7 |
None known |
sitecopyUbuntu:26.04:LTS |
All versions, plus listed versions 1:0.16.6-16build1 |
None known |
swish-eUbuntu:Pro:26.04:LTS |
All versions, plus listed versions 2.4.7-72.4.7-7.12.4.7-7.1ubuntu0.1~esm1 |
None known |
expatopenSUSE:Tumbleweed |
before 2.2.0-3.1 | 2.2.0-3.1 |
apache2openSUSE:Tumbleweed |
before 2.4.23-4.1 | 2.4.23-4.1 |
apr-utilopenSUSE:Tumbleweed |
before 1.5.4-4.4 | 1.5.4-4.4 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026
svn.python.org/view?view=rev&revision=74429
mandriva.com/security/advisories?name=MDVSA-2009:215
lists.fedoraproject.org/pipermail/package-announce/2010-November/051442.html
redhat.com/archives/fedora-package-announce/2009-December/msg01274.html
Show 194 moreShow less
secunia.com/advisories/38832
ubuntu.com/usn/USN-890-1
expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?r1=1.13&r2=1.15&view=patch
lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html
openwall.com/lists/oss-security/2009/10/22/9
mail.python.org/pipermail/expat-bugs/2009-January/002781.html
lists.vmware.com/pipermail/security-announce/2010/000082.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11019
vupen.com/english/advisories/2010/1107
securitytracker.com/id?1023160
bugzilla.redhat.com/show_bug.cgi?id=531697
bugs.gentoo.org/show_bug.cgi?id=280615
sourceforge.net/tracker/index.php?func=detail&aid=1990430&group_id=10127&atid=110127
sunsolve.sun.com/search/document.do?assetkey=1-66-273630-1
marc.info?l=bugtraq&m=130168502603566&w=2
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2009-3720
github.com/advisories/GHSA-pj3x-74qr-vrr4
docs.bell-sw.com/security/cves/CVE-2009-3720
security-tracker.debian.org/tracker/CVE-2009-3720
access.redhat.com/errata/RHSA-2009:1572
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1572.json
cve.org/CVERecord?id=CVE-2009-3720
rhn.redhat.com/errata/RHSA-2009-1625.html
ubuntu.com/security/CVE-2009-3720
suse.com/security/cve/CVE-2009-2625
This page doesn't list everything
Left out here: 21 references. The JSON record has them.