Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Ubuntu 14.04 ESM USN-5638-4 Moderate Expat Code Execution Threat

ubuntu
Calendar Grey February 28, 2023
Scroller Ubuntu
Security flaws in Ubuntu 14.04 ESM expose expats to risks necessitating patches to avert system failures or unauthorized code execution.
Expat could be made to crash or execute arbitrary code.

Summary

Expat could be made to crash or execute arbitrary code.

Software Description:

- expat: XML parsing C library

Details:

USN-5638-1 fixed several vulnerabilities in Expat. This update provides

the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

Rhodri James discovered that Expat incorrectly handled memory when

processing certain malformed XML files. An attacker could possibly

use this issue to cause a crash or execute arbitrary code.

Topics%20covered

Topics Covered

security advisory moderate code execution ubuntu expat memory crash

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  expat                           2.1.0-4ubuntu1.4+esm7
  libexpat1                       2.1.0-4ubuntu1.4+esm7

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5638-4

https://ubuntu.com/security/notices/USN-5638-1

CVE-2022-40674, CVE-2022-43680

February 28, 2023

Topics%20covered

Topics Covered

security advisory moderate code execution ubuntu expat memory crash

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.