| Revision Date: | 2017-07-25 | Version: | 1 | | Title: | CVE-2017-9233 on Ubuntu 18.10 (cosmic) - medium. | | Description: | XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.
| | Family: | unix | Class: | vulnerability | | Status: | | Reference(s): | CVE-2017-9233
| | Platform(s): | Ubuntu 18.10
| Product(s): | | | Definition Synopsis | | Ubuntu 18.10 (cosmic) is installed. AND Package Information
apache2: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'code-not-compiled').
OR apr-util: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'code-not-compiled').
OR cadaver: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life').
OR cmake: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'code-not-compiled').
OR expat package in cosmic, is related to the CVE in some way and has been fixed (note: '2.2.1-2').
OR firefox package in cosmic, is related to the CVE in some way and has been fixed (note: '67.0.4+build1-0ubuntu0.18.10.1').
OR ghostscript: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'code-not-compiled').
OR matanza: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life').
OR sitecopy: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life').
OR smart: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'code-not-compiled').
OR swish-e: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life').
OR tdom: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life').
OR texlive-bin: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'code-not-compiled').
OR thunderbird package in cosmic, is related to the CVE in some way and has been fixed (note: '60.7.1+build1-0ubuntu0.18.10.1').
OR tla: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life').
OR vnc4: while related to the CVE in some way, a decision has been made to ignore this issue.
|
|