Wind River Support Network

HomeDefectsLIN10-7760
Fixed

LIN10-7760 : Security Advisory - expat - CVE-2019-15903

Created: Sep 14, 2020    Updated: May 13, 2022
Resolved Date: Sep 23, 2020
Found In Version: 10.17.41.1
Fix Version: 10.17.41.23
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

CREATE(Triage):(User=admin) CVE-2019-15903 (https://nvd.nist.gov/vuln/detail/CVE-2019-15903)

CVEs


Live chat
Online