Search for packages
Package details: pkg:deb/ubuntu/coin3@4.0.0~CMake~6f54f1602475%2Bds1-2
purl pkg:deb/ubuntu/coin3@4.0.0~CMake~6f54f1602475%2Bds1-2
Next non-vulnerable version 4.0.0+ds-1build1
Latest non-vulnerable version 4.0.0+ds-1build1
Risk 3.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-8dyd-depr-aaam
Aliases:
CVE-2009-3560
The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
4.0.0+ds-1build1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-gnd3-sds3-aaam XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD. CVE-2017-9233

Date Actor Action Vulnerability Source VulnerableCode Version