cve/2019/CVE-2019-15903.md

CVE-2019-15903

Description

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

POC

Reference

• http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html
• http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html
• http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html
• https://github.com/libexpat/libexpat/pull/318
• https://usn.ubuntu.com/4132-1/
• https://usn.ubuntu.com/4202-1/
• https://www.oracle.com/security-alerts/cpuapr2020.html
• https://www.oracle.com/security-alerts/cpuoct2020.html

Github

• https://github.com/Anna-Rafaella/Conteneurisation
• https://github.com/fokypoky/places-list
• https://github.com/fredrkl/trivy-demo
• https://github.com/n0-traces/cve_monitor