CVE-2016-0718
Fixed in a distro release EPSS 13%
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
Products: mozilla firefox, apple mac_os_x, suse linux_enterprise_debuginfo, suse studio_onsite, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, opensuse leap, suse linux_enterprise_desktop, canonical ubuntu_linux, libexpat_project libexpat, debian_linux, opensuse, mcafee policy_auditor, python
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.4 | expat | 2.1.1-r1 |
| Debian 12 | expat | 2.1.1-2 |
| Debian 12 | libxmltok | no fix |
| Debian 13 | expat | 2.1.1-2 |
| Debian 14 | expat | 2.1.1-2 |
| Debian 7 | expat | 2.1.0-1+deb7u3 |
| Debian 8 | expat | 2.1.0-6+deb8u2 |
| Red Hat Enterprise Linux 6 | expat | 0:2.0.1-13.el6_8 |
| Red Hat Enterprise Linux 6 | expat-debuginfo | 0:2.0.1-13.el6_8 |
| Red Hat Enterprise Linux 6 | expat-devel | 0:2.0.1-13.el6_8 |
| Red Hat Enterprise Linux 7 | expat | 0:2.1.0-10.el7_3 |
| Red Hat Enterprise Linux 7 | expat-debuginfo | 0:2.1.0-10.el7_3 |
| Red Hat Enterprise Linux 7 | expat-devel | 0:2.1.0-10.el7_3 |
| Red Hat Enterprise Linux 7 | expat-static | 0:2.1.0-10.el7_3 |
| SUSE Enterprise Storage 5 | python3 | 3.4.10-25.39.3 |
| SUSE Enterprise Storage 5 | python3-base | 3.4.10-25.39.2 |
| SUSE HPE Helion OpenStack 8 | python3 | 3.4.10-25.39.3 |
| SUSE HPE Helion OpenStack 8 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Desktop 12 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Desktop 12 SP4 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Micro 5.3 | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Micro 5.4 | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Micro 5.5 | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 11 SP4 | expat | 2.0.1-88.38.1 |
| SUSE Linux Enterprise Server 12 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Server 12 SP1 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP2-BCL | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP3-BCL | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP4 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP4 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP5 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP5 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | expat | 2.8.5-21.55.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | expat | 2.8.5-21.55.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | expat | 2.0.1-88.38.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | expat | 2.0.1-88.38.1 |
| SUSE Linux Enterprise Software Development Kit 12 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | expat | 2.1.0-17.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python3-base | 3.4.10-25.39.2 |
| SUSE OpenStack Cloud 7 | python3 | 3.4.10-25.39.3 |
| SUSE OpenStack Cloud 7 | python3-base | 3.4.10-25.39.2 |
| SUSE OpenStack Cloud 8 | python3 | 3.4.10-25.39.3 |
| SUSE OpenStack Cloud 8 | python3-base | 3.4.10-25.39.2 |
| SUSE OpenStack Cloud Crowbar 8 | python3 | 3.4.10-25.39.3 |
| SUSE OpenStack Cloud Crowbar 8 | python3-base | 3.4.10-25.39.2 |
| SUSE Studio Onsite 1.3 | expat | 2.0.1-88.38.1 |
| Ubuntu 14.04 LTS | expat | 2.1.0-4ubuntu1.2 |
| Ubuntu 14.04 LTS | firefox | 48.0+build2-0ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | cadaver | no fix |
| Ubuntu 16.04 LTS | expat | 2.1.0-7ubuntu0.16.04.1 |
| Ubuntu 16.04 LTS | firefox | 48.0+build2-0ubuntu0.16.04.1 |
| Ubuntu 16.04 LTS | matanza | no fix |
| Ubuntu 18.04 LTS | cadaver | no fix |
| Ubuntu 18.04 LTS | matanza | no fix |
| Ubuntu 18.04 LTS | vnc4 | no fix |
| Ubuntu 20.04 LTS | cadaver | no fix |
| Ubuntu 20.04 LTS | coin3 | no fix |
| Ubuntu 20.04 LTS | matanza | no fix |
| Ubuntu 22.04 LTS | cadaver | no fix |
| Ubuntu 22.04 LTS | coin3 | no fix |
| Ubuntu 22.04 LTS | matanza | no fix |
| Ubuntu 24.04 LTS | cadaver | no fix |
| Ubuntu 24.04 LTS | coin3 | no fix |
| Ubuntu 24.04 LTS | matanza | no fix |
| Ubuntu 25.10 | cadaver | no fix |
| Ubuntu 25.10 | coin3 | no fix |
| Ubuntu 25.10 | matanza | no fix |
| Ubuntu 25.10 | sitecopy | no fix |
| Ubuntu 25.10 | swish-e | no fix |
| Ubuntu 25.10 | xmlrpc-c | no fix |
| Ubuntu 26.04 LTS | cadaver | no fix |
| Ubuntu 26.04 LTS | coin3 | no fix |
| Ubuntu 26.04 LTS | matanza | no fix |
| Ubuntu 26.04 LTS | sitecopy | no fix |
| Ubuntu 26.04 LTS | xmlrpc-c | no fix |
| Ubuntu 26.10 | cadaver | no fix |
| Ubuntu 26.10 | coin3 | no fix |
| Ubuntu 26.10 | matanza | no fix |
| Ubuntu 26.10 | sitecopy | no fix |
| Ubuntu 26.10 | swish-e | no fix |
| Ubuntu 26.10 | xmlrpc-c | no fix |
| Ubuntu Pro 14.04 LTS | coin3 | no fix |
| Ubuntu Pro 14.04 LTS | vnc4 | no fix |
| Ubuntu Pro 14.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 16.04 LTS | ayttm | no fix |
| Ubuntu Pro 16.04 LTS | cableswig | no fix |
| Ubuntu Pro 16.04 LTS | coin3 | no fix |
| Ubuntu Pro 16.04 LTS | insighttoolkit | no fix |
| Ubuntu Pro 16.04 LTS | libxmltok | 1.2-3ubuntu0.16.04.1~esm2 |
| Ubuntu Pro 16.04 LTS | swish-e | no fix |
| Ubuntu Pro 16.04 LTS | vnc4 | no fix |
| Ubuntu Pro 16.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 18.04 LTS | coin3 | no fix |
| Ubuntu Pro 18.04 LTS | libxmltok | 1.2-4ubuntu0.18.04.1~esm4 |
| Ubuntu Pro 18.04 LTS | libxmltok | 1.2-4ubuntu0.18.04.1~esm1 |
| Ubuntu Pro 18.04 LTS | swish-e | no fix |
| Ubuntu Pro 18.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 20.04 LTS | libxmltok | 1.2-4ubuntu0.20.04.1~esm4 |
| Ubuntu Pro 20.04 LTS | libxmltok | 1.2-4ubuntu0.20.04.1~esm1 |
| Ubuntu Pro 20.04 LTS | swish-e | no fix |
| Ubuntu Pro 20.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 22.04 LTS | libxmltok | 1.2-4ubuntu0.22.04.1~esm1 |
| Ubuntu Pro 22.04 LTS | libxmltok | 1.2-4ubuntu0.22.04.1~esm4 |
| Ubuntu Pro 22.04 LTS | swish-e | no fix |
| Ubuntu Pro 22.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 24.04 LTS | libxmltok | 1.2-4.1ubuntu2.24.0.4.1+esm2 |
| Ubuntu Pro 24.04 LTS | swish-e | no fix |
| Ubuntu Pro 24.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 26.04 LTS | swish-e | no fix |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | expat | 2.2.0-3.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |