[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZ86e6oX_p9HAPti3ml1xmo3zeDpdamYVSPnSQfaCMRM":3,"g5a-risk:CVE-2019-15903":303},{"success":4,"data":5,"meta":301},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":26,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":59,"references":60,"referencesCount":228,"weaknesses":229,"weaknessesCount":59,"isActivelyExploited":243,"cisaInfo":26,"otxData":26,"relatedBlogPosts":244,"seoMetadata":245,"configurations":270,"relatedVendorCves":299,"notableEvents":300},"CVE-2019-15903","What is CVE-2019-15903?","In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.","In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_Get...","2019-09-04T06:15:10.877","2025-05-30T20:15:23.62",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":38,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":37,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":34,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H","REQUIRED",6.5,"MEDIUM",2.8,[39],{"Source":17,"Type":18,"CVSSData":40,"BaseSeverity":36,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":41,"VectorString":42,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,10,2.9,0.06643,[47,47,47,47,47,47,47],"High",[51,56],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"libexpat_project","libexpat","*","cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*",{"vendor":57,"product":57,"version":54,"criteria":58,"vulnerable":4},"python","cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",2,[61,67,70,73,76,79,82,85,88,91,94,97,100,105,108,111,115,118,121,124,128,131,134,139,144,147,150,154,157,161,164,167,170,173,176,179,182,185,188,191,195,199,203,206,209,212,215,218,221,225],{"url":62,"source":63,"tags":64},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-09\u002Fmsg00080.html","Opensuse",[65,66],"Mailing List","Third Party Advisory",{"url":68,"source":63,"tags":69},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-09\u002Fmsg00081.html",[65,66],{"url":71,"source":63,"tags":72},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-11\u002Fmsg00000.html",[65,66],{"url":74,"source":63,"tags":75},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-11\u002Fmsg00002.html",[65,66],{"url":77,"source":63,"tags":78},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-11\u002Fmsg00003.html",[65,66],{"url":80,"source":63,"tags":81},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-11\u002Fmsg00013.html",[65,66],{"url":83,"source":63,"tags":84},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-11\u002Fmsg00016.html",[65,66],{"url":86,"source":63,"tags":87},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-11\u002Fmsg00017.html",[65,66],{"url":89,"source":63,"tags":90},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-11\u002Fmsg00018.html",[65,66],{"url":92,"source":63,"tags":93},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-11\u002Fmsg00019.html",[65,66],{"url":95,"source":63,"tags":96},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-01\u002Fmsg00008.html",[65,66],{"url":98,"source":63,"tags":99},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-01\u002Fmsg00040.html",[65,66],{"url":101,"source":102,"tags":103},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F154503\u002FSlackware-Security-Advisory-expat-Updates.html","Packetstormsecurity",[66,104],"VDB Entry",{"url":106,"source":102,"tags":107},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F154927\u002FSlackware-Security-Advisory-python-Updates.html",[66,104],{"url":109,"source":102,"tags":110},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F154947\u002FSlackware-Security-Advisory-mozilla-firefox-Updates.html",[66,104],{"url":112,"source":113,"tags":114},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FDec\u002F23","Seclists",[65,66],{"url":116,"source":113,"tags":117},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FDec\u002F26",[65,66],{"url":119,"source":113,"tags":120},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FDec\u002F27",[65,66],{"url":122,"source":113,"tags":123},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FDec\u002F30",[65,66],{"url":125,"source":126,"tags":127},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3210","Red Hat",[66],{"url":129,"source":126,"tags":130},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3237",[66],{"url":132,"source":126,"tags":133},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3756",[66],{"url":135,"source":136,"tags":137},"https:\u002F\u002Fgithub.com\u002Flibexpat\u002Flibexpat\u002Fcommit\u002Fc20b758c332d9a13afbbb276d30db1d183a85d43","GitHub",[138,66],"Patch",{"url":140,"source":136,"tags":141},"https:\u002F\u002Fgithub.com\u002Flibexpat\u002Flibexpat\u002Fissues\u002F317",[142,143,66],"Exploit","Issue Tracking",{"url":145,"source":136,"tags":146},"https:\u002F\u002Fgithub.com\u002Flibexpat\u002Flibexpat\u002Fissues\u002F342",[66],{"url":148,"source":136,"tags":149},"https:\u002F\u002Fgithub.com\u002Flibexpat\u002Flibexpat\u002Fpull\u002F318",[143,138,66],{"url":151,"source":152,"tags":153},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F11\u002Fmsg00006.html","Debian",[65,66],{"url":155,"source":152,"tags":156},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F11\u002Fmsg00017.html",[65,66],{"url":158,"source":159,"tags":160},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FA4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA\u002F","Fedoraproject",[],{"url":162,"source":159,"tags":163},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FBDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP\u002F",[],{"url":165,"source":159,"tags":166},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FS26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG\u002F",[],{"url":168,"source":113,"tags":169},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FDec\u002F17",[65,66],{"url":171,"source":113,"tags":172},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FDec\u002F21",[65,66],{"url":174,"source":113,"tags":175},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FDec\u002F23",[65,66],{"url":177,"source":113,"tags":178},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FNov\u002F1",[65,66],{"url":180,"source":113,"tags":181},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FNov\u002F24",[65,66],{"url":183,"source":113,"tags":184},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FOct\u002F29",[65,66],{"url":186,"source":113,"tags":187},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FSep\u002F30",[65,66],{"url":189,"source":113,"tags":190},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FSep\u002F37",[65,66],{"url":192,"source":193,"tags":194},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201911-08","Gentoo",[66],{"url":196,"source":197,"tags":198},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20190926-0004\u002F","Netapp",[66],{"url":200,"source":201,"tags":202},"https:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT210785","Apple",[66],{"url":204,"source":201,"tags":205},"https:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT210788",[66],{"url":207,"source":201,"tags":208},"https:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT210789",[66],{"url":210,"source":201,"tags":211},"https:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT210790",[66],{"url":213,"source":201,"tags":214},"https:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT210793",[66],{"url":216,"source":201,"tags":217},"https:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT210794",[66],{"url":219,"source":201,"tags":220},"https:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT210795",[66],{"url":222,"source":223,"tags":224},"https:\u002F\u002Fusn.ubuntu.com\u002F4132-1\u002F","Ubuntu",[66],{"url":226,"source":223,"tags":227},"https:\u002F\u002Fusn.ubuntu.com\u002F4132-2\u002F",[66],50,[230,238],{"id":231,"name":232,"description":233,"extendedDescription":234,"status":235,"abstraction":236,"structure":237},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":239,"name":240,"description":241,"extendedDescription":242,"status":235,"abstraction":236,"structure":237},"CWE-776","Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')","The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.","If the DTD contains a large number of nested or recursive entities, this can lead to explosive growth of data when parsed, causing a denial of service.",false,[],{"title":246,"metaDescription":247,"keywords":248,"canonicalUrl":249,"structuredData":250},"What is CVE-2019-15903? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-15903, a high severity cyber security vulnerability from 2019. In libexpat before 2.2.8, crafted XML input could fool the ...","CVE-2019-15903, CVE-2019-15903 vulnerability, CVE-2019-15903 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, libexpat_project security, python security, libexpat vulnerability, python vulnerability","\u002Fwhat-is\u002Fcve-2019-15903",{"@context":251,"@type":252,"headline":246,"description":247,"datePublished":10,"dateModified":11,"author":253,"publisher":257,"about":261,"mainEntityOfPage":265,"articleSection":268,"keywords":269},"https:\u002F\u002Fschema.org","TechArticle",{"@type":254,"name":255,"url":256},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":254,"name":255,"url":256,"logo":258},{"@type":259,"url":260},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":262,"name":6,"description":263,"additionalType":264},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":266,"@id":267},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-15903","Cybersecurity","CVE-2019-15903, CVE-2019-15903 vulnerability, CVE-2019-15903 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[271,279],{"Operator":26,"Negate":26,"Nodes":272},[273],{"Operator":274,"Negate":26,"CPEMatch":275},"OR",[276],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":277,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":278,"VersionEndIncluding":26},"53820561-496E-490D-8061-A21C9C69C208","2.2.8",{"Operator":26,"Negate":26,"Nodes":280},[281],{"Operator":274,"Negate":26,"CPEMatch":282},[283,287,291,295],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":284,"VersionStartExcluding":26,"VersionStartIncluding":285,"VersionEndExcluding":286,"VersionEndIncluding":26},"B09B31A2-30BF-4E95-81A3-F77FD97DF5B6","2.7.0","2.7.17",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":288,"VersionStartExcluding":26,"VersionStartIncluding":289,"VersionEndExcluding":290,"VersionEndIncluding":26},"9A384586-B574-4240-8BCF-CCE69498F336","3.5.0","3.5.8",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":292,"VersionStartExcluding":26,"VersionStartIncluding":293,"VersionEndExcluding":294,"VersionEndIncluding":26},"DD0A51C5-9774-4CB3-A4ED-7C68AF2EFA73","3.6.0","3.6.10",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":296,"VersionStartExcluding":26,"VersionStartIncluding":297,"VersionEndExcluding":298,"VersionEndIncluding":26},"26CE919D-4E17-44A1-97FD-0DD55B14701F","3.7.0","3.7.5",[],[],{"lastModified":11,"cacheTime":302,"version":41},1792353254375,{"score":228,"band":304,"action":305,"scoredAt":306},"Medium","Plan remediation","2026-10-16T06:46:49.847921+00:00"]