NVD脆弱性詳細

CVE-2019-15903

概要	In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
公表日	2019年9月4日15:15
登録日	2021年1月26日11:39
最終更新日	2024年11月21日13:29

CVSS3.1 : HIGH
スコア	7.5
ベクター	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	高

CVSS2.0 : MEDIUM
スコア	5.0
ベクター	AV:N/AC:L/Au:N/C:N/I:N/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	低
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1		以上	以下	より上	未満
cpe:2.3:a:libexpat_project:libexpat::::::::					2.2.8

構成2	以上	以下	より上	未満
cpe:2.3:a:python:python::::::::	3.5.0			3.5.8
cpe:2.3:a:python:python::::::::	2.7.0			2.7.17
cpe:2.3:a:python:python::::::::	3.7.0			3.7.5
cpe:2.3:a:python:python::::::::	3.6.0			3.6.10

関連情報、対策とツール

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html	Mailing List Third Party Advisory
2	http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html	Mailing List Third Party Advisory
3	http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html	Mailing List Third Party Advisory
4	http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html	Mailing List Third Party Advisory
5	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html	Mailing List Third Party Advisory
6	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html	Mailing List Third Party Advisory
7	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html	Mailing List Third Party Advisory
8	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html	Mailing List Third Party Advisory
9	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html	Mailing List Third Party Advisory
10	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html	Mailing List Third Party Advisory
11	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html	Mailing List Third Party Advisory
12	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html	Mailing List Third Party Advisory
13	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html	Mailing List Third Party Advisory
14	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html	Mailing List Third Party Advisory
15	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html	Mailing List Third Party Advisory
16	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html	Mailing List Third Party Advisory
17	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html	Mailing List Third Party Advisory
18	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html	Mailing List Third Party Advisory
19	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html	Mailing List Third Party Advisory
20	http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html	Mailing List Third Party Advisory
21	http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html	Mailing List Third Party Advisory
22	http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html	Mailing List Third Party Advisory
23	http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html	Mailing List Third Party Advisory
24	http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html	Mailing List Third Party Advisory
25	http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html	Third Party Advisory VDB Entry
26	http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html	Third Party Advisory VDB Entry
27	http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html	Third Party Advisory VDB Entry
28	http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html	Third Party Advisory VDB Entry
29	http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html	Third Party Advisory VDB Entry
30	http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html	Third Party Advisory VDB Entry
31	http://seclists.org/fulldisclosure/2019/Dec/23	Mailing List Third Party Advisory
32	http://seclists.org/fulldisclosure/2019/Dec/23	Mailing List Third Party Advisory
33	http://seclists.org/fulldisclosure/2019/Dec/26	Mailing List Third Party Advisory
34	http://seclists.org/fulldisclosure/2019/Dec/26	Mailing List Third Party Advisory
35	http://seclists.org/fulldisclosure/2019/Dec/27	Mailing List Third Party Advisory
36	http://seclists.org/fulldisclosure/2019/Dec/27	Mailing List Third Party Advisory
37	http://seclists.org/fulldisclosure/2019/Dec/30	Mailing List Third Party Advisory
38	http://seclists.org/fulldisclosure/2019/Dec/30	Mailing List Third Party Advisory
39	https://access.redhat.com/errata/RHSA-2019:3210	Third Party Advisory
40	https://access.redhat.com/errata/RHSA-2019:3210	Third Party Advisory
41	https://access.redhat.com/errata/RHSA-2019:3237	Third Party Advisory
42	https://access.redhat.com/errata/RHSA-2019:3237	Third Party Advisory
43	https://access.redhat.com/errata/RHSA-2019:3756	Third Party Advisory
44	https://access.redhat.com/errata/RHSA-2019:3756	Third Party Advisory
45	https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43	Patch Third Party Advisory
46	https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43	Patch Third Party Advisory
47	https://github.com/libexpat/libexpat/issues/317	Exploit Issue Tracking Third Party Advisory
48	https://github.com/libexpat/libexpat/issues/317	Exploit Issue Tracking Third Party Advisory
49	https://github.com/libexpat/libexpat/issues/342	Third Party Advisory
50	https://github.com/libexpat/libexpat/issues/342	Third Party Advisory
51	https://github.com/libexpat/libexpat/pull/318	Issue Tracking Patch Third Party Advisory
52	https://github.com/libexpat/libexpat/pull/318	Issue Tracking Patch Third Party Advisory
53	https://lists.debian.org/debian-lts-announce/2019/11/msg00006.html	Mailing List Third Party Advisory
54	https://lists.debian.org/debian-lts-announce/2019/11/msg00006.html	Mailing List Third Party Advisory
55	https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html	Mailing List Third Party Advisory
56	https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html	Mailing List Third Party Advisory
57	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA/
58	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA/
59	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP/
60	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP/
61	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/
62	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/
63	https://seclists.org/bugtraq/2019/Dec/17	Mailing List Third Party Advisory
64	https://seclists.org/bugtraq/2019/Dec/17	Mailing List Third Party Advisory
65	https://seclists.org/bugtraq/2019/Dec/21	Mailing List Third Party Advisory
66	https://seclists.org/bugtraq/2019/Dec/21	Mailing List Third Party Advisory
67	https://seclists.org/bugtraq/2019/Dec/23	Mailing List Third Party Advisory
68	https://seclists.org/bugtraq/2019/Dec/23	Mailing List Third Party Advisory
69	https://seclists.org/bugtraq/2019/Nov/1	Mailing List Third Party Advisory
70	https://seclists.org/bugtraq/2019/Nov/1	Mailing List Third Party Advisory
71	https://seclists.org/bugtraq/2019/Nov/24	Mailing List Third Party Advisory
72	https://seclists.org/bugtraq/2019/Nov/24	Mailing List Third Party Advisory
73	https://seclists.org/bugtraq/2019/Oct/29	Mailing List Third Party Advisory
74	https://seclists.org/bugtraq/2019/Oct/29	Mailing List Third Party Advisory
75	https://seclists.org/bugtraq/2019/Sep/30	Mailing List Third Party Advisory
76	https://seclists.org/bugtraq/2019/Sep/30	Mailing List Third Party Advisory
77	https://seclists.org/bugtraq/2019/Sep/37	Mailing List Third Party Advisory
78	https://seclists.org/bugtraq/2019/Sep/37	Mailing List Third Party Advisory
79	https://security.gentoo.org/glsa/201911-08	Third Party Advisory
80	https://security.gentoo.org/glsa/201911-08	Third Party Advisory
81	https://security.netapp.com/advisory/ntap-20190926-0004/	Third Party Advisory
82	https://security.netapp.com/advisory/ntap-20190926-0004/	Third Party Advisory
83	https://support.apple.com/kb/HT210785	Third Party Advisory
84	https://support.apple.com/kb/HT210785	Third Party Advisory
85	https://support.apple.com/kb/HT210788	Third Party Advisory
86	https://support.apple.com/kb/HT210788	Third Party Advisory
87	https://support.apple.com/kb/HT210789	Third Party Advisory
88	https://support.apple.com/kb/HT210789	Third Party Advisory
89	https://support.apple.com/kb/HT210790	Third Party Advisory
90	https://support.apple.com/kb/HT210790	Third Party Advisory
91	https://support.apple.com/kb/HT210793	Third Party Advisory
92	https://support.apple.com/kb/HT210793	Third Party Advisory
93	https://support.apple.com/kb/HT210794	Third Party Advisory
94	https://support.apple.com/kb/HT210794	Third Party Advisory
95	https://support.apple.com/kb/HT210795	Third Party Advisory
96	https://support.apple.com/kb/HT210795	Third Party Advisory
97	https://usn.ubuntu.com/4132-1/	Third Party Advisory
98	https://usn.ubuntu.com/4132-1/	Third Party Advisory
99	https://usn.ubuntu.com/4132-2/	Third Party Advisory
100	https://usn.ubuntu.com/4132-2/	Third Party Advisory
101	https://usn.ubuntu.com/4165-1/	Third Party Advisory
102	https://usn.ubuntu.com/4165-1/	Third Party Advisory
103	https://usn.ubuntu.com/4202-1/	Third Party Advisory
104	https://usn.ubuntu.com/4202-1/	Third Party Advisory
105	https://usn.ubuntu.com/4335-1/	Third Party Advisory
106	https://usn.ubuntu.com/4335-1/	Third Party Advisory
107	https://www.debian.org/security/2019/dsa-4530	Third Party Advisory
108	https://www.debian.org/security/2019/dsa-4530	Third Party Advisory
109	https://www.debian.org/security/2019/dsa-4549	Third Party Advisory
110	https://www.debian.org/security/2019/dsa-4549	Third Party Advisory
111	https://www.debian.org/security/2019/dsa-4571	Third Party Advisory
112	https://www.debian.org/security/2019/dsa-4571	Third Party Advisory
113	https://www.oracle.com/security-alerts/cpuapr2020.html	Third Party Advisory
114	https://www.oracle.com/security-alerts/cpuapr2020.html	Third Party Advisory
115	https://www.oracle.com/security-alerts/cpuoct2020.html	Third Party Advisory
116	https://www.oracle.com/security-alerts/cpuoct2020.html	Third Party Advisory
117	https://www.tenable.com/security/tns-2021-11	Third Party Advisory
118	https://www.tenable.com/security/tns-2021-11	Third Party Advisory

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-125	境界外読み取り	https://cwe.mitre.org/data/definitions/125.html
2	CWE-776	DTD の再帰的なエンティティ参照の不適切な制限	https://cwe.mitre.org/data/definitions/776.html

JVN脆弱性情報

libexpat における XML 外部エンティティの脆弱性

タイトル	libexpat における XML 外部エンティティの脆弱性
概要	libexpat には、XML 外部エンティティの脆弱性が存在します。
想定される影響	サービス運用妨害 (DoS) 状態にされる可能性があります。
対策	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
公表日	2019年8月27日0:00
登録日	2019年9月9日11:54
最終更新日	2021年12月28日17:00

影響を受けるシステム

日立

RV3000

libexpat project

libexpat 2.2.8 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2019-15903	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15903
National Vulnerability Database (NVD)
2	CVE-2019-15903	https://nvd.nist.gov/vuln/detail/CVE-2019-15903

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-611	https://cwe.mitre.org/data/definitions/611.html

ベンダー情報

No	名前	URL
GitHub
1	xmlparse.c: Deny internal entities closing the doctype	https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43
2	[CVE-2019-15903] Deny internal entities closing the doctype (for #317) #318	https://github.com/libexpat/libexpat/pull/318
3	[CVE-2019-15903] Heap overflow in XML_GetCurrentLineNumber #317	https://github.com/libexpat/libexpat/issues/317
ソフトウェア製品セキュリティ情報
4	hitachi-sec-2021-223	https://www.hitachi.co.jp/products/it/server/security/info/vulnerable/hitachi_sec_2021_223.html

変更履歴

No	変更内容	変更日
1	[2019年09月09日] 掲載	2019年9月9日11:54
2	[2021年12月28日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：日立 (hitachi-sec-2021-223) を追加	2021年12月28日13:51