CVE-2019-15903

Published: Sep 4, 2019Modified: May 30, 2025

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Affected (5)

Products: Libexpat Project: Libexpat · Python: Python

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Libexpat Project Libexpat	Before 2.2.8

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Python Python	From 2.7.0 to 2.7.17
Python Python	From 3.5.0 to 3.5.8
Python Python	From 3.6.0 to 3.6.10
Python Python	From 3.7.0 to 3.7.5

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-776

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.

References (118)

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2019/Dec/23

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2019/Dec/26

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2019/Dec/27

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2019/Dec/30

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://access.redhat.com/errata/RHSA-2019:3210

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3237

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3756

Source: cve@mitre.org

Third Party Advisory

https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/libexpat/libexpat/issues/317

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://github.com/libexpat/libexpat/issues/342

Source: cve@mitre.org

Third Party Advisory

https://github.com/libexpat/libexpat/pull/318

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/11/msg00006.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/

Source: cve@mitre.org

https://seclists.org/bugtraq/2019/Dec/17

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Dec/21

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Dec/23

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Nov/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Nov/24

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Oct/29

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Sep/30

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Sep/37

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/201911-08

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20190926-0004/

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT210785

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT210788

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT210789

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT210790

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT210793

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT210794

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT210795

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4132-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4132-2/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4165-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4202-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4335-1/

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2019/dsa-4530

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2019/dsa-4549

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2019/dsa-4571

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpuapr2020.html

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Source: cve@mitre.org

Third Party Advisory

https://www.tenable.com/security/tns-2021-11

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html