USN-7307-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 26 Feb 2025, 22:33
Last modified:27 Apr 2026, 17:46

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Feb 2025, 22:33
Published
Vulnerability first disclosed
27 Apr 2026, 17:46
Last Modified
Vulnerability information updated

Description

libxmltok vulnerability Tim Boddy discovered that Expat, contained within the xmltok library, did not properly handle memory reallocation when processing XML files. If a user or application linked against Expat were tricked into opening a crafted XML file, an attacker could cause a denial of service by consuming excessive memory resources.

Affected Systems

  • ubuntu•libxmltok

    < 1.2-4ubuntu0.18.04.1~esm5 | < 1.2-4ubuntu0.20.04.1~esm5 | < 1.2-4ubuntu0.22.04.1~esm5 | < 1.2-4.1ubuntu2.24.0.4.1+esm3

References (2)