CVE-2017-9233
High
Description
XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.
SeverityHigh
CVSS7.5
Exploit probability95. percentile8.7%
Product
Libexpat
PublishedJul 25, 2017
First seenJul 25, 2017
How to fix
Update
- python python2.7.15, 3.3.7, 3.4.7, 3.5.4, 3.6.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libexpat_project libexpat | v ≤ 2.2.0 | — |
| python python | 2.7.0 ≤ v < 2.7.15, 3.3.0 ≤ v < 3.3.7, 3.4.0 ≤ v < 3.4.7, 3.5.0 ≤ v < 3.5.4, 3.6.0 ≤ v < 3.6.2 | 2.7.15, 3.3.7, 3.4.7, 3.5.4, 3.6.2 |
| debian debian_linux | 8.0, 9.0, 10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.