Known vulnerabilities in expat (Ubuntu package) - page 2
Vendor:
Canonical Ltd.
Software:
expat (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:expat_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
35
Public exploits:
2
Known exploited (KEV):
0
Breakdown by Severity Chart
2.1.0-4ubuntu1.4+esm12
2.1.0-7ubuntu0.16.04.5+esm13
2.2.5-3ubuntu0.9+esm4
2.2.9-1ubuntu0.8+esm2
2.4.7-1ubuntu0.8
2.6.1-2ubuntu0.5
2.7.4-1ubuntu0.1
2.1.0-4ubuntu1.4+esm13
2.1.0-7ubuntu0.16.04.5+esm14
2.2.5-3ubuntu0.9+esm5
2.2.9-1ubuntu0.8+esm3
2.4.7-1ubuntu0.9
2.6.1-2ubuntu0.6
2.7.4-1ubuntu0.2
2.1.0-7ubuntu0.16.04.5+esm12
2.6.1-2ubuntu0.4
2.1.0-4ubuntu1.4+esm11
2.1.0-7ubuntu0.16.04.5+esm11
2.2.5-3ubuntu0.9+esm3
2.2.9-1ubuntu0.8+esm1
2.4.7-1ubuntu0.7
2.7.1-2ubuntu0.2
2.7.0-1ubuntu1
2.7.0-1
2.6.4-1
2.6.3-1
2.6.3-2
2.6.2-2
2.6.2-1
2.6.1-2build1
2.6.1-1
2.6.1-2
2.6.0-1
2.5.0-2
2.4.9-1
2.5.0-1
2.4.8-2
2.4.8-1
2.4.7-1
2.4.6-1
2.4.5-2
2.4.5-1
2.4.4-1
2.4.3-3
2.4.3-2
2.4.3-1
2.4.2-1
2.4.1-3
2.4.1-2ubuntu0.3
2.4.1-2ubuntu0.1
2.4.1-1
2.4.1-2
2.3.0-1
2.2.10-2
2.2.10-1ubuntu1
2.2.10-1build1
2.2.10-1
2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.2
2.0.1-7.2ubuntu1.5
2.0.1-7.2ubuntu1.6
2.0.1-7.2ubuntu1.7
2.7.1-2
2.7.1-1
2.4.7-1ubuntu0.6
2.6.1-2ubuntu0.3
2.6.2-2ubuntu0.2
lib64expat1
2.2.9-1ubuntu0.8
2.4.7-1ubuntu0.5
2.6.1-2ubuntu0.2
2.6.2-2ubuntu0.1
2.4.7-1ubuntu0.4
2.2.9-1ubuntu0.7
2.6.1-2ubuntu0.1
2.4.7-1ubuntu0.3
2.5.0-2ubuntu0.1
Ubuntu Pro (Infra-only)
2.2.9-1ubuntu0.6
2.4.7-1ubuntu0.2
2.4.8-2ubuntu0.22.10.1
2.2.5-3ubuntu0.9
2.2.9-1ubuntu0.5
2.4.7-1ubuntu0.1
2.2.5-3ubuntu0.8
2.1.07ubuntu0.16.04.5+esm6
2.2.5-3ubuntu0.7
2.2.5-3ubuntu0.4
2.2.9
2.2.9-1build1
2.2.7
2.2.5
2.1.0
2.0.1
2.2.9-1
2.2.6-1ubuntu0.19.5
2.2.5-3ubuntu0.2
2.1.0-7ubuntu0.16.04.5
2.2.7-2
2.2.7-1
2.2.6-2
2.2.6-1ubuntu0.19.04
2.2.6-1ubuntu0.18.10
2.2.5-3ubuntu0.1
2.1.0-7ubuntu0.16.04.4
2.2.6-1
2.2.5-3
2.2.5-1
2.2.5-2
2.2.5-0ubuntu2
2.2.5-0ubuntu1
2.2.3-2
2.2.3-1
2.1.0~beta3-1
2.1.0~beta3-2
2.2.2-2
2.2.2-1
2.2.1-3
2.2.1-2
2.2.1-1
2.2.0-2ubuntu0.1
2.2.0-2
2.2.0-1ubuntu0.1
2.1.1-2
2.1.1-3
2.2.0-1
2.1.1-1ubuntu2
2.1.1-1ubuntu1
2.1.1-1
2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.2
2.1.0-7ubuntu0.16.04.1
2.1.0-7ubuntu0.15.10.2
2.1.0-7ubuntu0.15.10.1
2.1.0-7
2.1.0-5
2.1.0-6
2.1.0-6ubuntu1
2.1.0-6ubuntu1.1
2.1.0-4ubuntu1.4
2.1.0-4ubuntu1.3
2.1.0-4ubuntu1.2
2.1.0-1
2.1.0-3
2.1.0-4
2.1.0-4ubuntu1
2.1.0-4ubuntu1.1
2.0.1-7.2ubuntu1.4
2.0.1-7.2ubuntu1.3
1.0-1
1.0-2
1.0.2-1
1.1-1
1.1-2
1.1-3
1.95.1-1
1.95.1-2
1.95.1-3
1.95.1-4
1.95.1-5
1.95.1-6
1.95.2-1
1.95.2-2
1.95.2-2.1
1.95.2-3
1.95.2-4
1.95.2-5
1.95.2-6
1.95.2-7
1.95.2-8
1.95.2-9
1.95.2-10
1.95.5-1
1.95.6-1
1.95.6-2
1.95.6-3
1.95.6-4
1.95.6-5
1.95.6-6
1.95.6-7
1.95.6-8
1.95.8-1
1.95.8-2
1.95.8-3
1.95.8-3.1
1.95.8-3.2
1.95.8-3.3
1.95.8-3.4
1.95.8-4
1.95.8-4ubuntu1
2.0.1-0ubuntu1
2.0.1-1
2.0.1-2
2.0.1-3
2.0.1-4
2.0.1-5
2.0.1-6
2.0.1-7
2.0.1-7.1
2.0.1-7.2
2.0.1-7.2ubuntu1
2.0.1-7.2ubuntu1.1
2.0.1-7.2ubuntu1.2
Vulnerabilities (35)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144344 - Integer overflow CVE-2026-56406 |
CWE-190 | Medium | 2.1.0-4ubuntu1.4+esm13, 2.1.0-7ubuntu0.16.04.5+esm14, 2.2.5-3ubuntu0.9+esm5, 2.2.9-1ubuntu0.8+esm3, 2.4.7-1ubuntu0.9, 2.6.1-2ubuntu0.6, 2.7.4-1ubuntu0.2 | 19.08.2026 |
SB2026081992 SB2026081995 SB20260819116 and 6 more |
||
| #VU144347 - Integer overflow CVE-2026-56409 |
CWE-190 | Medium | 2.1.0-4ubuntu1.4+esm13, 2.1.0-7ubuntu0.16.04.5+esm14, 2.2.5-3ubuntu0.9+esm5, 2.2.9-1ubuntu0.8+esm3, 2.4.7-1ubuntu0.9, 2.6.1-2ubuntu0.6, 2.7.4-1ubuntu0.2 | 19.08.2026 |
SB2026081992 SB20260819116 SB20260819117 and 4 more |
||
| #VU128246 - Insufficient Entropy CVE-2026-41080 |
CWE-331 | Low | 2.1.0-4ubuntu1.4+esm12, 2.1.0-7ubuntu0.16.04.5+esm12, 2.1.0-7ubuntu0.16.04.5+esm13, 2.2.5-3ubuntu0.9+esm4, 2.2.9-1ubuntu0.8+esm2, 2.4.7-1ubuntu0.8, 2.6.1-2ubuntu0.5, 2.7.4-1ubuntu0.1 | 27.04.2026 |
SB20260427193 SB2026051240 SB2026051270 and 17 more |
||
| #VU122268 - Integer overflow CVE-2026-25210 |
CWE-190 | High | 2.1.0-4ubuntu1.4+esm11, 2.1.0-7ubuntu0.16.04.5+esm11, 2.2.5-3ubuntu0.9+esm3, 2.2.9-1ubuntu0.8+esm1, 2.4.7-1ubuntu0.7, 2.6.1-2ubuntu0.4, 2.7.1-2ubuntu0.2 | 03.02.2026 |
SB2026020364 SB20260205121 SB2026020611 and 23 more |
||
| #VU122267 - NULL Pointer Dereference CVE-2026-24515 |
CWE-476 | Medium | 2.1.0-4ubuntu1.4+esm11, 2.1.0-7ubuntu0.16.04.5+esm11, 2.2.5-3ubuntu0.9+esm3, 2.2.9-1ubuntu0.8+esm1, 2.4.7-1ubuntu0.7, 2.6.1-2ubuntu0.4, 2.7.1-2ubuntu0.2 | 03.02.2026 |
SB2026020364 SB2026020367 SB2026020368 and 19 more |
||
| #VU105723 - Stack-based buffer overflow CVE-2024-8176 |
CWE-121 | High | 2.4.7-1ubuntu0.6, 2.6.1-2ubuntu0.3, 2.6.2-2ubuntu0.2 | 14.03.2025 |
SB2025031426 SB2025031429 SB2025031430 and 105 more |
||
| #VU99614 - Improper input validation CVE-2024-50602 |
CWE-20 | Medium | Ubuntu Pro (Infra-only), lib64expat1, 2.2.9-1ubuntu0.8, 2.4.7-1ubuntu0.5, 2.6.1-2ubuntu0.2, 2.6.2-2ubuntu0.1 | 01.11.2024 |
SB2024110155 SB2024110182 SB2024110534 and 98 more |
||
| #VU96899 - Integer overflow CVE-2024-45492 |
CWE-190 | High | Ubuntu Pro (Infra-only), 2.2.9-1ubuntu0.7, 2.4.7-1ubuntu0.4, 2.6.1-2ubuntu0.1 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 108 more |
||
| #VU96898 - Integer overflow CVE-2024-45491 |
CWE-190 | High | Ubuntu Pro (Infra-only), 2.2.9-1ubuntu0.7, 2.4.7-1ubuntu0.4, 2.6.1-2ubuntu0.1 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 106 more |
||
| #VU96897 - Buffer Underwrite ('Buffer Underflow') CVE-2024-45490 |
CWE-124 | High | Ubuntu Pro (Infra-only), 2.2.9-1ubuntu0.7, 2.4.7-1ubuntu0.4, 2.6.1-2ubuntu0.1 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 113 more |
||
| #VU87337 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-28757 |
CWE-611 | Medium | 2.4.7-1ubuntu0.3, 2.5.0-2ubuntu0.1 | 11.03.2024 |
SB2024031135 SB2024031143 SB2024031144 and 75 more |
||
| #VU86230 - Resource exhaustion CVE-2023-52425 |
CWE-400 | Medium | 2.4.7-1ubuntu0.3, 2.5.0-2ubuntu0.1 | 07.02.2024 |
SB2024020750 SB2024020754 SB2024020765 and 120 more |
||
| #VU68718 - Use After Free CVE-2022-43680 |
CWE-416 | Medium | Ubuntu Pro (Infra-only), 2.2.5-3ubuntu0.8, 2.2.5-3ubuntu0.9, 2.2.9-1ubuntu0.5, 2.2.9-1ubuntu0.6, 2.4.7-1ubuntu0.1, 2.4.7-1ubuntu0.2, 2.4.8-2ubuntu0.22.10.1 | 25.10.2022 |
SB2022102560 SB2022102566 SB2022103010 and 99 more |
||
| #VU67532 - Use After Free CVE-2022-40674 |
CWE-416 | High | Ubuntu Pro (Infra-only), 2.1.07ubuntu0.16.04.5+esm6, 2.2.5-3ubuntu0.8, 2.2.9-1ubuntu0.5, 2.4.7-1ubuntu0.1 | 21.09.2022 |
SB2022092118 SB2022092119 SB2022092317 and 111 more |
||
| #VU21091 - Out-of-bounds read CVE-2019-15903 |
CWE-125 | Medium | 2.1.0-7ubuntu0.16.04.5, 2.2.5-3ubuntu0.2, 2.2.6-1ubuntu0.19.5 | 12.09.2019 |
SB2019091209 SB2019091210 SB2019091701 and 61 more |
Showing elements 21 - 40 out of 35