CVE-2019-15903 Memory corruption in n/a
Crafted XML input causes a heap-based buffer over-read in libexpat, potentially leading to denial of service or information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2019-15903?
CVE-2019-15903 is a medium-severity memory corruption vulnerability in Libexpat Project Libexpat, published on 4 Sep 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
Which versions are affected by CVE-2019-15903?
It affects 2 products.
Linux distribution packages (8)
expat SUSE:Linux Enterprise Desktop 12 SP4 | All versions | 2.1.0-21.9.1 |
expat SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 2.2.5-3.6.1 |
expat SUSE:Linux Enterprise Module for Basesystem 15 SP1 | All versions | 2.2.5-3.6.1 |
expat SUSE:Linux Enterprise Server 12 SP4 | All versions | 2.1.0-21.9.1 |
expat SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 2.1.0-21.9.1 |
expat SUSE:Linux Enterprise Software Development Kit 12 SP4 | All versions | 2.1.0-21.9.1 |
expat openSUSE:Leap 15.0 | All versions | 2.2.5-lp150.2.6.1 |
expat openSUSE:Leap 15.1 | All versions | 2.2.5-lp151.3.6.1 |
Products include Libexpat Project Libexpat, Python Python.
How do I fix CVE-2019-15903?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-15903 being exploited?
There is no known exploitation of CVE-2019-15903 in the wild and no public exploit code.
Other vulnerabilities in Libexpat Project Libexpat
Sources
Also known as ALPINE-CVE-2019-15903, CLEANSTART-2026-BU09886, DEBIAN-CVE-2019-15903, DLA-1912-1, DSA-4530-1, GHSA-w829-6hpw-frjf and 9 more.