expat vulnerabilities (Alpaquita)
41 vulnerabilities.
expatAlpaquitalibexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes8.2 HighexpatAlpaquitalibexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser8.2 HighexpatAlpaquitalibexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay8.7 HighexpatAlpaquitalibexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset8.2 HighexpatAlpaquitalibexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer8.3 HighexpatAlpaquitalibexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc8.2 HighexpatAlpaquitaExpat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate8.7 HighexpatAlpaquitaExpat Out-of-Bounds Read via dtdCopy8.7 HighexpatAlpaquitalibexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a...4.9 MediumexpatAlpaquitaIn libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to...5.9 MediumexpatAlpaquitaExpat Denial of Service via storeAtts() Quadratic Complexity8.7 HighexpatAlpaquitalibexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low...6.2 MediumexpatAlpaquitalibexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks...4.9 MediumexpatAlpaquitaxmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.6.9 MediumexpatAlpaquitaxmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.6.9 MediumexpatAlpaquitaxmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir...6.5 MediumexpatAlpaquitalibexpat before 2.8.2 has an integer overflow in copyString.6.9 MediumexpatAlpaquitalibexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and...6.9 MediumexpatAlpaquitalibexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that...6.9 MediumexpatAlpaquitalibexpat before 2.8.2 has an integer overflow in getAttributeId.6.9 MediumexpatAlpaquitalibexpat before 2.8.2 has an integer overflow in addBinding.6.9 MediumexpatAlpaquitalibexpat before 2.8.2 has an integer overflow in storeAtts.6.9 MediumexpatAlpaquitaIn libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because...6.9 MediumexpatAlpaquitalibexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within...4.9 MediumexpatAlpaquitalibexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse,...4.9 MediumexpatAlpaquitaIn libexpat before 2.8.1, the computational complexity of attribute name collision checks allows...2.9 LowexpatAlpaquitalibexpat before 2.7.6 uses insufficient entropy, and thus hash flooding can occur via a crafted...2.9 LowexpatAlpaquitalibexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after...2.9 LowexpatAlpaquitalibexpat before 2.7.5 allows an infinite loop while parsing DTD content.4.0 MediumexpatAlpaquitalibexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity...4.0 MediumexpatAlpaquitaIn libexpat before 2.7.4, the doContent function does not properly determine the buffer size...6.9 MediumexpatAlpaquitaIn libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler...2.9 LowexpatAlpaquitalibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 HighexpatAlpaquitaLibexpat: expat: improper restriction of xml entity expansion depth in libexpat7.5 HighexpatAlpaquitaAn issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser...5.9 MediumexpatAlpaquitaAn issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an...9.8 CriticalexpatAlpaquitaAn issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer...9.8 CriticalexpatAlpaquitaAn issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length...7.5 HighexpatAlpaquitalibexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of...7.5 HighexpatAlpaquitalibexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile...5.5 MediumexpatAlpaquitalibexpat through 2.5.0 allows a denial of service (resource consumption) because many full...7.5 High