6.8

CVE-2015-1283

Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Google ≫ Chrome Version <= 43.0.2357.134
Libexpat Project ≫ Libexpat Version <= 2.1.0
Python ≫ Python Version >= 2.7.0 < 2.7.12
Python ≫ Python Version >= 3.3.0 < 3.3.7
Python ≫ Python Version >= 3.4.0 < 3.4.5
Python ≫ Python Version >= 3.5.0 < 3.5.2
Debian ≫ Debian Linux Version 7.0
Debian ≫ Debian Linux Version 8.0
Debian ≫ Debian Linux Version 9.0
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 15.04
Suse ≫ Linux Enterprise Debuginfo Version 11 Update sp4
Suse ≫ Studio Onsite Version 1.3
Opensuse ≫ Leap Version 42.1
Opensuse ≫ Opensuse Version 13.1
Opensuse ≫ Opensuse Version 13.2
Suse ≫ Linux Enterprise Desktop Version 12 Update -
Suse ≫ Linux Enterprise Desktop Version 12 Update sp1
Suse ≫ Linux Enterprise Server Version 11 Update sp4
Suse ≫ Linux Enterprise Server Version 12 Update -
Suse ≫ Linux Enterprise Server Version 12 Update sp1
Oracle ≫ Solaris Version 10
Oracle ≫ Solaris Version 11.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 19.07% 0.97
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
https://kc.mcafee.com/corporate/index?page=content&id=SB10365
https://www.tenable.com/security/tns-2016-20
https://security.gentoo.org/glsa/201701-21
https://source.android.com/security/bulletin/2016-11-01.html
http://www.debian.org/security/2015/dsa-3315
http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html
http://rhn.redhat.com/errata/RHSA-2015-1499.html
http://www.securityfocus.com/bid/75973
http://www.securitytracker.com/id/1033031
https://security.gentoo.org/glsa/201603-09
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html
http://www.debian.org/security/2015/dsa-3318
http://www.ubuntu.com/usn/USN-2726-1
https://code.google.com/p/chromium/issues/detail?id=492052
https://codereview.chromium.org/1224303003