This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2009-3720 →
DEBIAN-CVE-2009-3720
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-...
Original description
The description as published by the source.
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
audacity
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1"}]}]
Debian:13
audacity
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1"}]}]
Debian:14
audacity
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1"}]}]
Debian:12
cadaver
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
cadaver
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
cadaver
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:12
cmake
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-6"}]}]
Debian:13
cmake
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-6"}]}]
Debian:14
cmake
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-6"}]}]
Debian:12
coin3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0~CMake~6f54f1602475+ds1-1"}]}]
Debian:13
coin3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0~CMake~6f54f1602475+ds1-1"}]}]
Debian:14
coin3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0~CMake~6f54f1602475+ds1-1"}]}]
Debian:12
expat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-5"}]}]
Debian:13
expat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-5"}]}]
Debian:14
expat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-5"}]}]
Debian:12
gdcm
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-2"}]}]
Debian:13
gdcm
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-2"}]}]
Debian:14
gdcm
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-2"}]}]
Debian:12
ghostscript
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.71~dfsg-2"}]}]
Debian:13
ghostscript
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.71~dfsg-2"}]}]
Debian:14
ghostscript
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.71~dfsg-2"}]}]
Debian:12
libxmltok
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:12
matanza
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
matanza
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
matanza
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:12
mcabber
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-1"}]}]
Debian:13
mcabber
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-1"}]}]
Debian:12
paraview
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-1"}]}]
Debian:13
paraview
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-1"}]}]
Debian:14
paraview
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-1"}]}]
Debian:12
poco
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6p1-1"}]}]
Debian:13
poco
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6p1-1"}]}]
Debian:14
poco
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6p1-1"}]}]
Debian:12
simgear
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-1"}]}]
Debian:13
simgear
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-1"}]}]
Debian:14
simgear
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-1"}]}]
Debian:12
tdom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3~20080525-1"}]}]
Debian:13
tdom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3~20080525-1"}]}]
Debian:14
tdom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3~20080525-1"}]}]
Debian:12
tla
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5+dfsg-15"}]}]
Debian:12
udunits
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-4"}]}]
Debian:13
udunits
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-4"}]}]
Debian:14
udunits
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-4"}]}]
Debian:12
xmlrpc-c
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.06.27-1.1"}]}]
Debian:13
xmlrpc-c
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.06.27-1.1"}]}]
Debian:14
xmlrpc-c
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.06.27-1.1"}]}]
Debian:12
xotcl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-1.2"}]}]
Debian:13
xotcl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-1.2"}]}]
Debian:14
xotcl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-1.2"}]}]
References
- advisory security-tracker.debian.org