expat vulnerabilities (Debian)
75 vulnerabilities.
expatDebianExpat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.7.5 HighexpatDebianExpat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for...9.8 CriticalexpatDebianaddBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalexpatDebianbuild_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalexpatDebiandefineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 CriticalexpatDebianlookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.8.8 HighexpatDebiannextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.8.8 HighexpatDebianstoreAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.8.8 HighexpatDebianIn doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for...8.1 HighexpatDebianIn Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts...8.8 HighexpatDebianIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighexpatDebianIn libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of...7.5 HighexpatDebianXML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows...7.5 HighexpatDebianAn integer overflow during the parsing of XML using the Expat library. This vulnerability affects...9.8 CriticalexpatDebianThe XML parser in Expat does not use sufficient entropy for hash initialization, which allows...7.5 HighexpatDebianThe overflow protection in Expat is removed by compilers with certain optimization settings,...8.1 HighexpatDebianExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...9.8 CriticalexpatDebianMultiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in...6.8 MediumexpatDebianexpat 2.1.0 and earlier does not properly handle entities expansion unless an application...6.8 MediumexpatDebianExpat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes...5.9 MediumexpatDebianMemory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context...5.0 MediumexpatDebianThe XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the...4.3 MediumexpatDebianThe big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig...5.0 MediumexpatDebianThe updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python,...5.0 Medium