CVE-2015-1283 Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (h...
MediumCVSS 6.8
EPSS 18.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/expat(Debian:12) | < 2.1.0-7 | 2.1.0-7 |
| debian/expat(Debian:13) | < 2.1.0-7 | 2.1.0-7 |
| debian/expat(Debian:14) | < 2.1.0-7 | 2.1.0-7 |
| debian/libxmltok(Debian:12) | All versions | No fix listed |
| debian/libxmltok(Debian:12) | = 1.2-4 | No fix listed |
| debian/libxmltok(Debian:12) | = 1.2-4.1 | No fix listed |
| debian/libxmltok(Debian:12) | = 1.2-4.1~exp1 | No fix listed |
| debian/libxmltok(Debian:12) | = 1.2-4.2 | No fix listed |
| Google Chrome | <= 43.0.2357.134 | No fix listed |
| libexpat project libexpat | <= 2.1.0 | No fix listed |
| python | >= 2.7.0, < 2.7.12 | 2.7.12 |
| python | >= 3.3.0, < 3.3.7 | 3.3.7 |
| python | >= 3.4.0, < 3.4.5 | 3.4.5 |
| python | >= 3.5.0, < 3.5.2 | 3.5.2 |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| SUSE linux enterprise debuginfo | = 11-sp4 | No fix listed |
| SUSE studio onsite | = 1.3 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
Show 34 more
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE linux enterprise desktop | = 12 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp1 | No fix listed |
| SUSE linux enterprise server | = 11-sp4 | No fix listed |
| SUSE linux enterprise server | = 12 | No fix listed |
| SUSE linux enterprise server | = 12-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp4 | No fix listed |
| SUSE linux enterprise software development kit | = 12 | No fix listed |
| SUSE linux enterprise software development kit | = 12-sp1 | No fix listed |
| oracle solaris | = 10 | No fix listed |
| oracle solaris | = 11.3 | No fix listed |
| ubuntu/cadaver(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/coin3(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/matanza(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/libxmltok(Ubuntu:24.04) | < 1.2-4.1ubuntu2.24.0.4.1+esm2 | 1.2-4.1ubuntu2.24.0.4.1+esm2 |
| ubuntu/swish-e(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/xmlrpc-c(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/cadaver(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/coin3(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/matanza(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/sitecopy(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/xmlrpc-c(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/swish-e(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/cadaver(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/coin3(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/matanza(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/sitecopy(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/swish-e(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/xmlrpc-c(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/cadaver(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/coin3(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/matanza(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/libxmltok(Ubuntu:22.04) | < 1.2-4ubuntu0.22.04.1~esm4 | 1.2-4ubuntu0.22.04.1~esm4 |
| ubuntu/swish-e(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/xmlrpc-c(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-2677-1 vendor-advisory
- USN-2726-1 vendor-advisory
- USN-3013-1 vendor-advisory
- USN-5455-1 vendor-advisory
- USN-4772-1 vendor-advisory
- USN-7199-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2015-1283 vendor-advisory
- googlechromereleases.blogspot.com
- openSUSE-SU-2015:1287 vendor-advisory
- openSUSE-SU-2016:1441 vendor-advisory
- SUSE-SU-2016:1508 vendor-advisory
- SUSE-SU-2016:1512 vendor-advisory
- openSUSE-SU-2016:1523 vendor-advisory
- RHSA-2015:1499 vendor-advisory
- DSA-3315 vendor-advisory
- DSA-3318 vendor-advisory
- www.oracle.com
- 75973 vdb-entry
- 1033031 vdb-entry
- USN-2726-1 vendor-advisory
- code.google.com
- codereview.chromium.org
- kc.mcafee.com
- GLSA-201603-09 vendor-advisory
- GLSA-201701-21 vendor-advisory
- source.android.com
- www.tenable.com
- bugs.debian.org issue-tracking