A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
{
"binaries": [
{
"binary_version": "1.33.06-0ubuntu1",
"binary_name": "libxmlrpc-c++8"
},
{
"binary_version": "1.33.06-0ubuntu1",
"binary_name": "libxmlrpc-c++8-dev"
},
{
"binary_version": "1.33.06-0ubuntu1",
"binary_name": "libxmlrpc-core-c3"
},
{
"binary_version": "1.33.06-0ubuntu1",
"binary_name": "libxmlrpc-core-c3-dev"
},
{
"binary_version": "1.33.06-0ubuntu1",
"binary_name": "xmlrpc-api-utils"
}
]
}{
"binaries": [
{
"binary_version": "2.6.3-3ubuntu3",
"binary_name": "libgdcm-cil"
},
{
"binary_version": "2.6.3-3ubuntu3",
"binary_name": "libgdcm-java"
},
{
"binary_version": "2.6.3-3ubuntu3",
"binary_name": "libgdcm-tools"
},
{
"binary_version": "2.6.3-3ubuntu3",
"binary_name": "libgdcm2-dev"
},
{
"binary_version": "2.6.3-3ubuntu3",
"binary_name": "libgdcm2.6"
},
{
"binary_version": "2.6.3-3ubuntu3",
"binary_name": "libvtkgdcm-cil"
},
{
"binary_version": "2.6.3-3ubuntu3",
"binary_name": "libvtkgdcm-java"
},
{
"binary_version": "2.6.3-3ubuntu3",
"binary_name": "libvtkgdcm-tools"
},
{
"binary_version": "2.6.3-3ubuntu3",
"binary_name": "libvtkgdcm2-dev"
},
{
"binary_version": "2.6.3-3ubuntu3",
"binary_name": "libvtkgdcm2.6"
},
{
"binary_version": "2.6.3-3ubuntu3",
"binary_name": "python-gdcm"
},
{
"binary_version": "2.6.3-3ubuntu3",
"binary_name": "python-vtkgdcm"
}
]
}{
"binaries": [
{
"binary_version": "4.9.0-4ubuntu1.1",
"binary_name": "insighttoolkit4-examples"
},
{
"binary_version": "4.9.0-4ubuntu1.1",
"binary_name": "insighttoolkit4-python"
},
{
"binary_version": "4.9.0-4ubuntu1.1",
"binary_name": "libinsighttoolkit4-dev"
},
{
"binary_version": "4.9.0-4ubuntu1.1",
"binary_name": "libinsighttoolkit4.9"
}
]
}{
"binaries": [
{
"binary_version": "1.33.14-1ubuntu1",
"binary_name": "libxmlrpc-c++8-dev"
},
{
"binary_version": "1.33.14-1ubuntu1",
"binary_name": "libxmlrpc-c++8v5"
},
{
"binary_version": "1.33.14-1ubuntu1",
"binary_name": "libxmlrpc-core-c3"
},
{
"binary_version": "1.33.14-1ubuntu1",
"binary_name": "libxmlrpc-core-c3-dev"
},
{
"binary_version": "1.33.14-1ubuntu1",
"binary_name": "xmlrpc-api-utils"
}
]
}{
"binaries": [
{
"binary_version": "2.8.4-1build2",
"binary_name": "libgdcm-cil"
},
{
"binary_version": "2.8.4-1build2",
"binary_name": "libgdcm-java"
},
{
"binary_version": "2.8.4-1build2",
"binary_name": "libgdcm-tools"
},
{
"binary_version": "2.8.4-1build2",
"binary_name": "libgdcm2-dev"
},
{
"binary_version": "2.8.4-1build2",
"binary_name": "libgdcm2.8"
},
{
"binary_version": "2.8.4-1build2",
"binary_name": "libvtkgdcm-cil"
},
{
"binary_version": "2.8.4-1build2",
"binary_name": "libvtkgdcm-java"
},
{
"binary_version": "2.8.4-1build2",
"binary_name": "libvtkgdcm-tools"
},
{
"binary_version": "2.8.4-1build2",
"binary_name": "libvtkgdcm2-dev"
},
{
"binary_version": "2.8.4-1build2",
"binary_name": "libvtkgdcm2.8"
},
{
"binary_version": "2.8.4-1build2",
"binary_name": "python-gdcm"
},
{
"binary_version": "2.8.4-1build2",
"binary_name": "python-vtkgdcm"
}
]
}{
"binaries": [
{
"binary_version": "4.12.2-dfsg1-1ubuntu1",
"binary_name": "insighttoolkit4-examples"
},
{
"binary_version": "4.12.2-dfsg1-1ubuntu1",
"binary_name": "insighttoolkit4-python"
},
{
"binary_version": "4.12.2-dfsg1-1ubuntu1",
"binary_name": "libinsighttoolkit4-dev"
},
{
"binary_version": "4.12.2-dfsg1-1ubuntu1",
"binary_name": "libinsighttoolkit4.12"
}
]
}{
"binaries": [
{
"binary_version": "1.33.14-8build1",
"binary_name": "libxmlrpc-c++8-dev"
},
{
"binary_version": "1.33.14-8build1",
"binary_name": "libxmlrpc-c++8v5"
},
{
"binary_version": "1.33.14-8build1",
"binary_name": "libxmlrpc-core-c3"
},
{
"binary_version": "1.33.14-8build1",
"binary_name": "libxmlrpc-core-c3-dev"
},
{
"binary_version": "1.33.14-8build1",
"binary_name": "xmlrpc-api-utils"
}
]
}{
"binaries": [
{
"binary_version": "4.13.2-dfsg1-8",
"binary_name": "insighttoolkit4-examples"
},
{
"binary_version": "4.13.2-dfsg1-8",
"binary_name": "insighttoolkit4-python3"
},
{
"binary_version": "4.13.2-dfsg1-8",
"binary_name": "libinsighttoolkit4-dev"
},
{
"binary_version": "4.13.2-dfsg1-8",
"binary_name": "libinsighttoolkit4.13"
}
]
}{
"binaries": [
{
"binary_version": "1.33.14-8build2",
"binary_name": "libxmlrpc-c++8-dev"
},
{
"binary_version": "1.33.14-8build2",
"binary_name": "libxmlrpc-c++8v5"
},
{
"binary_version": "1.33.14-8build2",
"binary_name": "libxmlrpc-core-c3"
},
{
"binary_version": "1.33.14-8build2",
"binary_name": "libxmlrpc-core-c3-dev"
},
{
"binary_version": "1.33.14-8build2",
"binary_name": "xmlrpc-api-utils"
}
]
}{
"binaries": [
{
"binary_version": "4.13.3withdata-dfsg2-1ubuntu1",
"binary_name": "insighttoolkit4-examples"
},
{
"binary_version": "4.13.3withdata-dfsg2-1ubuntu1",
"binary_name": "libinsighttoolkit4-dev"
},
{
"binary_version": "4.13.3withdata-dfsg2-1ubuntu1",
"binary_name": "libinsighttoolkit4.13"
}
]
}{
"binaries": [
{
"binary_version": "1.33.14-10",
"binary_name": "libxmlrpc-c++8-dev"
},
{
"binary_version": "1.33.14-10",
"binary_name": "libxmlrpc-c++8v5"
},
{
"binary_version": "1.33.14-10",
"binary_name": "libxmlrpc-core-c3"
},
{
"binary_version": "1.33.14-10",
"binary_name": "libxmlrpc-core-c3-dev"
},
{
"binary_version": "1.33.14-10",
"binary_name": "xmlrpc-api-utils"
}
]
}{
"binaries": [
{
"binary_version": "1.33.14-12build2",
"binary_name": "libxmlrpc-c++8-dev"
},
{
"binary_version": "1.33.14-12build2",
"binary_name": "libxmlrpc-c++8t64"
},
{
"binary_version": "1.33.14-12build2",
"binary_name": "libxmlrpc-core-c3-dev"
},
{
"binary_version": "1.33.14-12build2",
"binary_name": "libxmlrpc-core-c3t64"
},
{
"binary_version": "1.33.14-12build2",
"binary_name": "xmlrpc-api-utils"
}
]
}{
"binaries": [
{
"binary_version": "0.11.10+dfsg-2",
"binary_name": "libwbxml2-1"
},
{
"binary_version": "0.11.10+dfsg-2",
"binary_name": "libwbxml2-dev"
},
{
"binary_version": "0.11.10+dfsg-2",
"binary_name": "libwbxml2-private-dev"
},
{
"binary_version": "0.11.10+dfsg-2",
"binary_name": "libwbxml2-utils"
}
]
}{
"binaries": [
{
"binary_version": "1.59.03-7",
"binary_name": "libxmlrpc-c++9"
},
{
"binary_version": "1.59.03-7",
"binary_name": "libxmlrpc-c++9-dev"
},
{
"binary_version": "1.59.03-7",
"binary_name": "libxmlrpc-core-c3-dev"
},
{
"binary_version": "1.59.03-7",
"binary_name": "libxmlrpc-core-c3t64"
},
{
"binary_version": "1.59.03-7",
"binary_name": "libxmlrpc-util-dev"
},
{
"binary_version": "1.59.03-7",
"binary_name": "libxmlrpc-util4"
},
{
"binary_version": "1.59.03-7",
"binary_name": "xmlrpc-api-utils"
}
]
}{
"binaries": [
{
"binary_version": "0.11.10+dfsg-2",
"binary_name": "libwbxml2-1"
},
{
"binary_version": "0.11.10+dfsg-2",
"binary_name": "libwbxml2-dev"
},
{
"binary_version": "0.11.10+dfsg-2",
"binary_name": "libwbxml2-private-dev"
},
{
"binary_version": "0.11.10+dfsg-2",
"binary_name": "libwbxml2-utils"
}
]
}{
"binaries": [
{
"binary_version": "1.59.03-10.1",
"binary_name": "libxmlrpc-c++9"
},
{
"binary_version": "1.59.03-10.1",
"binary_name": "libxmlrpc-c++9-dev"
},
{
"binary_version": "1.59.03-10.1",
"binary_name": "libxmlrpc-core-c3-dev"
},
{
"binary_version": "1.59.03-10.1",
"binary_name": "libxmlrpc-core-c3t64"
},
{
"binary_version": "1.59.03-10.1",
"binary_name": "libxmlrpc-util-dev"
},
{
"binary_version": "1.59.03-10.1",
"binary_name": "libxmlrpc-util4"
},
{
"binary_version": "1.59.03-10.1",
"binary_name": "xmlrpc-api-utils"
}
]
}{
"binaries": [
{
"binary_version": "2.1.0-4ubuntu1.4+esm10",
"binary_name": "expat"
},
{
"binary_version": "2.1.0-4ubuntu1.4+esm10",
"binary_name": "lib64expat1"
},
{
"binary_version": "2.1.0-4ubuntu1.4+esm10",
"binary_name": "lib64expat1-dev"
},
{
"binary_version": "2.1.0-4ubuntu1.4+esm10",
"binary_name": "libexpat1"
},
{
"binary_version": "2.1.0-4ubuntu1.4+esm10",
"binary_name": "libexpat1-dev"
}
]
}{
"binaries": [
{
"binary_version": "5.8.0-14.1ubuntu3+esm1",
"binary_name": "libvtk-java"
},
{
"binary_version": "5.8.0-14.1ubuntu3+esm1",
"binary_name": "libvtk5-dev"
},
{
"binary_version": "5.8.0-14.1ubuntu3+esm1",
"binary_name": "libvtk5-qt4-dev"
},
{
"binary_version": "5.8.0-14.1ubuntu3+esm1",
"binary_name": "libvtk5.8"
},
{
"binary_version": "5.8.0-14.1ubuntu3+esm1",
"binary_name": "libvtk5.8-qt4"
},
{
"binary_version": "5.8.0-14.1ubuntu3+esm1",
"binary_name": "python-vtk"
},
{
"binary_version": "5.8.0-14.1ubuntu3+esm1",
"binary_name": "tcl-vtk"
},
{
"binary_version": "5.8.0-14.1ubuntu3+esm1",
"binary_name": "vtk-examples"
}
]
}{
"binaries": [
{
"binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
"binary_name": "expat"
},
{
"binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
"binary_name": "lib64expat1"
},
{
"binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
"binary_name": "lib64expat1-dev"
},
{
"binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
"binary_name": "libexpat1"
},
{
"binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
"binary_name": "libexpat1-dev"
}
]
}{
"binaries": [
{
"binary_version": "3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1",
"binary_name": "libcoin80-dev"
},
{
"binary_version": "3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1",
"binary_name": "libcoin80-runtime"
},
{
"binary_version": "3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1",
"binary_name": "libcoin80v5"
}
]
}{
"binaries": [
{
"binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1",
"binary_name": "libvtk-java"
},
{
"binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1",
"binary_name": "libvtk5-dev"
},
{
"binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1",
"binary_name": "libvtk5-qt4-dev"
},
{
"binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1",
"binary_name": "libvtk5.10"
},
{
"binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1",
"binary_name": "libvtk5.10-qt4"
},
{
"binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1",
"binary_name": "python-vtk"
},
{
"binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1",
"binary_name": "tcl-vtk"
},
{
"binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1",
"binary_name": "vtk-examples"
}
]
}