CVE-2015-1283
Fixed in a distro release EPSS 18%
Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.
Products: google chrome, libexpat_project libexpat, python, debian_linux, canonical ubuntu_linux, suse linux_enterprise_debuginfo, suse studio_onsite, opensuse leap, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, oracle solaris
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | expat | 2.1.0-7 |
| Debian 12 | libxmltok | no fix |
| Debian 13 | expat | 2.1.0-7 |
| Debian 14 | expat | 2.1.0-7 |
| Debian 6.0 | expat | 2.0.1-7+squeeze2 |
| Debian 7 | expat | 2.1.0-1+deb7u2 |
| Debian 8 | chromium-browser | 44.0.2403.89-1~deb8u1 |
| Debian 8 | expat | 2.1.0-6+deb8u1 |
| Red Hat rhel extras 6 | chromium-browser | 0:44.0.2403.89-1.el6 |
| Red Hat rhel extras 6 | chromium-browser-debuginfo | 0:44.0.2403.89-1.el6 |
| SUSE Linux Enterprise Desktop 12 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Server 11 SP4 | expat | 2.0.1-88.38.1 |
| SUSE Linux Enterprise Server 12 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Server 12 SP1 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | expat | 2.0.1-88.38.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | expat | 2.0.1-88.38.1 |
| SUSE Linux Enterprise Software Development Kit 12 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | expat | 2.1.0-17.1 |
| SUSE Studio Onsite 1.3 | expat | 2.0.1-88.38.1 |
| Ubuntu 14.04 LTS | chromium-browser | 44.0.2403.89-0ubuntu0.14.04.1.1095 |
| Ubuntu 14.04 LTS | expat | 2.1.0-4ubuntu1.1 |
| Ubuntu 14.04 LTS | oxide-qt | 1.8.4-0ubuntu0.14.04.2 |
| Ubuntu 16.04 LTS | cadaver | no fix |
| Ubuntu 16.04 LTS | matanza | no fix |
| Ubuntu 18.04 LTS | cadaver | no fix |
| Ubuntu 18.04 LTS | matanza | no fix |
| Ubuntu 18.04 LTS | vnc4 | no fix |
| Ubuntu 20.04 LTS | cadaver | no fix |
| Ubuntu 20.04 LTS | coin3 | no fix |
| Ubuntu 20.04 LTS | matanza | no fix |
| Ubuntu 22.04 LTS | cadaver | no fix |
| Ubuntu 22.04 LTS | coin3 | no fix |
| Ubuntu 22.04 LTS | matanza | no fix |
| Ubuntu 24.04 LTS | cadaver | no fix |
| Ubuntu 24.04 LTS | coin3 | no fix |
| Ubuntu 24.04 LTS | matanza | no fix |
| Ubuntu 25.10 | cadaver | no fix |
| Ubuntu 25.10 | coin3 | no fix |
| Ubuntu 25.10 | matanza | no fix |
| Ubuntu 25.10 | sitecopy | no fix |
| Ubuntu 25.10 | swish-e | no fix |
| Ubuntu 25.10 | xmlrpc-c | no fix |
| Ubuntu 26.04 LTS | cadaver | no fix |
| Ubuntu 26.04 LTS | coin3 | no fix |
| Ubuntu 26.04 LTS | matanza | no fix |
| Ubuntu 26.04 LTS | sitecopy | no fix |
| Ubuntu 26.04 LTS | xmlrpc-c | no fix |
| Ubuntu 26.10 | cadaver | no fix |
| Ubuntu 26.10 | coin3 | no fix |
| Ubuntu 26.10 | matanza | no fix |
| Ubuntu 26.10 | sitecopy | no fix |
| Ubuntu 26.10 | swish-e | no fix |
| Ubuntu 26.10 | xmlrpc-c | no fix |
| Ubuntu Pro 14.04 LTS | coin3 | no fix |
| Ubuntu Pro 14.04 LTS | vnc4 | 4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1 |
| Ubuntu Pro 14.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 16.04 LTS | ayttm | no fix |
| Ubuntu Pro 16.04 LTS | cableswig | no fix |
| Ubuntu Pro 16.04 LTS | coin3 | no fix |
| Ubuntu Pro 16.04 LTS | insighttoolkit | no fix |
| Ubuntu Pro 16.04 LTS | libxmltok | 1.2-3ubuntu0.16.04.1~esm2 |
| Ubuntu Pro 16.04 LTS | swish-e | no fix |
| Ubuntu Pro 16.04 LTS | vnc4 | 4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1 |
| Ubuntu Pro 16.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 18.04 LTS | coin3 | no fix |
| Ubuntu Pro 18.04 LTS | libxmltok | 1.2-4ubuntu0.18.04.1~esm1 |
| Ubuntu Pro 18.04 LTS | libxmltok | 1.2-4ubuntu0.18.04.1~esm4 |
| Ubuntu Pro 18.04 LTS | swish-e | no fix |
| Ubuntu Pro 18.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 20.04 LTS | libxmltok | 1.2-4ubuntu0.20.04.1~esm1 |
| Ubuntu Pro 20.04 LTS | libxmltok | 1.2-4ubuntu0.20.04.1~esm4 |
| Ubuntu Pro 20.04 LTS | swish-e | no fix |
| Ubuntu Pro 20.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 22.04 LTS | libxmltok | 1.2-4ubuntu0.22.04.1~esm1 |
| Ubuntu Pro 22.04 LTS | libxmltok | 1.2-4ubuntu0.22.04.1~esm4 |
| Ubuntu Pro 22.04 LTS | swish-e | no fix |
| Ubuntu Pro 22.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 24.04 LTS | libxmltok | 1.2-4.1ubuntu2.24.0.4.1+esm2 |
| Ubuntu Pro 24.04 LTS | swish-e | no fix |
| Ubuntu Pro 24.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 26.04 LTS | swish-e | no fix |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |
| openSUSE Tumbleweed | chromium | 55.0.2883.75-3.1 |
| openSUSE Tumbleweed | expat | 2.2.0-3.1 |