- Packages tracked
- 38,394
- CVEs found
- 728
- Fixed in fork
- 13
- Fixed upstream
- 8
- In flight
- 6
- Pending
- 700
2 matching records
| CVE | Project | Title | Fork fix | State | Evidence | Discussion |
|---|---|---|---|---|---|---|
| DEBIAN-CVE-2015-1283 | debian/expat | Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2016-4472 | debian/expat | The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and | - | Awaiting approval | Evidence | None recorded |