Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
BDU:2015-02825 (CVE-2009-3560)
Vulnerability from fstec – Published: 2015-04-28 – Updated: 2024-07-05 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации
Summary
Множественные уязвимости пакета lib64expat1 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно
Severity
Status
Confirmed by the vendor
Exploitation
Data structure manipulation
Incidents
Being clarified
Remediation
Software update
CWE
- CWE-119 - Выход операции за границы буфера в памяти
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
s390x:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
i686:
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
arm:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
sparc:
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
x86-64:
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
alpha:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
ia64:
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
mips:
libexpat1-udeb - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
hppa:
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
Debian GNU/Linux 5:
ppc:
libexpat1 - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
s390x:
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
i686:
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
arm:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
sparc:
libexpat1-udeb - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
x86-64:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
armel:
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
alpha:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
ia64:
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
mips:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
mipsel:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
hppa:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\ts390x:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\ti686:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\tarm:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\tsparc:\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\tx86-64:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\talpha:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\tia64:\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\tmips:\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\thppa:\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\ts390x:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\ti686:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tarm:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tsparc:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\tx86-64:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tarmel:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\talpha:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tia64:\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\tmips:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tmipsel:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\thppa:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "04.12.2009",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "05.07.2024",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-02825",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2009-3560, DSA-1953, ID:1400951",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 lib64expat1 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1953/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5)"
}
BDU:2015-02826 (CVE-2009-3560)
Vulnerability from fstec – Published: 2015-04-28 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации
Summary
Множественные уязвимости пакета lib64expat1-dev операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно
Severity
Status
Confirmed by the vendor
Exploitation
Data structure manipulation
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-119 - Выход операции за границы буфера в памяти
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
s390x:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
i686:
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
arm:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
sparc:
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
x86-64:
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
alpha:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
ia64:
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
mips:
libexpat1-udeb - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
hppa:
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
Debian GNU/Linux 5:
ppc:
libexpat1 - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
s390x:
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
i686:
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
arm:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
sparc:
libexpat1-udeb - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
x86-64:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
armel:
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
alpha:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
ia64:
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
mips:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
mipsel:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
hppa:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\ts390x:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\ti686:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\tarm:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\tsparc:\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\tx86-64:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\talpha:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\tia64:\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\tmips:\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\thppa:\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\ts390x:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\ti686:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tarm:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tsparc:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\tx86-64:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tarmel:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\talpha:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tia64:\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\tmips:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tmipsel:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\thppa:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-02826",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2009-3560, DSA-1953, ID:1400951",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 lib64expat1-dev \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1953/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5)"
}
BDU:2015-02827 (CVE-2009-3560)
Vulnerability from fstec – Published: 2015-04-28 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации
Summary
Множественные уязвимости пакета libexpat1 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно
Severity
Status
Confirmed by the vendor
Exploitation
Data structure manipulation
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-119 - Выход операции за границы буфера в памяти
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
s390x:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
i686:
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
arm:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
sparc:
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
x86-64:
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
alpha:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
ia64:
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
mips:
libexpat1-udeb - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
hppa:
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
Debian GNU/Linux 5:
ppc:
libexpat1 - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
s390x:
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
i686:
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
arm:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
sparc:
libexpat1-udeb - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
x86-64:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
armel:
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
alpha:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
ia64:
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
mips:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
mipsel:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
hppa:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\ts390x:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\ti686:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\tarm:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\tsparc:\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\tx86-64:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\talpha:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\tia64:\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\tmips:\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\thppa:\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\ts390x:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\ti686:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tarm:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tsparc:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\tx86-64:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tarmel:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\talpha:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tia64:\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\tmips:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tmipsel:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\thppa:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-02827",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2009-3560, DSA-1953, ID:1400951",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libexpat1 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1953/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5)"
}
BDU:2015-02828 (CVE-2009-3560)
Vulnerability from fstec – Published: 2015-04-28 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации
Summary
Множественные уязвимости пакета libexpat1-dev операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно
Severity
Status
Confirmed by the vendor
Exploitation
Data structure manipulation
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-119 - Выход операции за границы буфера в памяти
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
s390x:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
i686:
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
arm:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
sparc:
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
x86-64:
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
alpha:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
ia64:
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
mips:
libexpat1-udeb - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
hppa:
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
Debian GNU/Linux 5:
ppc:
libexpat1 - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
s390x:
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
i686:
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
arm:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
sparc:
libexpat1-udeb - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
x86-64:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
armel:
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
alpha:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
ia64:
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
mips:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
mipsel:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
hppa:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\ts390x:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\ti686:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\tarm:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\tsparc:\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\tx86-64:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\talpha:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\tia64:\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\tmips:\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\thppa:\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\ts390x:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\ti686:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tarm:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tsparc:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\tx86-64:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tarmel:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\talpha:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tia64:\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\tmips:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tmipsel:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\thppa:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-02828",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2009-3560, DSA-1953, ID:1400951",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libexpat1-dev \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1953/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5)"
}
BDU:2015-02829 (CVE-2009-3560)
Vulnerability from fstec – Published: 2015-04-28 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации
Summary
Множественные уязвимости пакета libexpat1-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно
Severity
Status
Confirmed by the vendor
Exploitation
Data structure manipulation
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-119 - Выход операции за границы буфера в памяти
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
s390x:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
i686:
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
arm:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
sparc:
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
x86-64:
libexpat1 - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
alpha:
libexpat1 - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
ia64:
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
mips:
libexpat1-udeb - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-dev - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
hppa:
libexpat1-dev - 1.95.8-3.4+etch2
expat - 1.95.8-3.4+etch2
libexpat1-udeb - 1.95.8-3.4+etch2
libexpat1 - 1.95.8-3.4+etch2
Debian GNU/Linux 5:
ppc:
libexpat1 - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
s390x:
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
i686:
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
arm:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
sparc:
libexpat1-udeb - 2.0.1-4+lenny2
lib64expat1 - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
lib64expat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
x86-64:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
armel:
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
alpha:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
ia64:
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
mips:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
mipsel:
libexpat1-dev - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1-udeb - 2.0.1-4+lenny2
hppa:
libexpat1-udeb - 2.0.1-4+lenny2
libexpat1-dev - 2.0.1-4+lenny2
expat - 2.0.1-4+lenny2
libexpat1 - 2.0.1-4+lenny2
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\ts390x:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\ti686:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\tarm:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\tsparc:\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\tx86-64:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\talpha:\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\tia64:\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\tmips:\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\n\thppa:\n\t\tlibexpat1-dev - 1.95.8-3.4+etch2\n\t\texpat - 1.95.8-3.4+etch2\n\t\tlibexpat1-udeb - 1.95.8-3.4+etch2\n\t\tlibexpat1 - 1.95.8-3.4+etch2\nDebian GNU/Linux 5:\n\tppc:\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\ts390x:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\ti686:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tarm:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tsparc:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlib64expat1 - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlib64expat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\tx86-64:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tarmel:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\talpha:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tia64:\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\tmips:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\tmipsel:\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\thppa:\n\t\tlibexpat1-udeb - 2.0.1-4+lenny2\n\t\tlibexpat1-dev - 2.0.1-4+lenny2\n\t\texpat - 2.0.1-4+lenny2\n\t\tlibexpat1 - 2.0.1-4+lenny2",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-02829",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2009-3560, DSA-1953, ID:1400951",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libexpat1-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1953/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5)"
}