CVE-2017-9233
Python 3.5 and 1 other: XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers…
CVE-2017-9233 is fixed in 2 products on 1 platform, first by Python 3.6 3.6.2, released July 17, 2017. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.5
No vendor severity
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0874
95th percentile
XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Windows apps | |||
| Python 3.5 | 3.5.4 | Python 3.5 3.5.4 | Aug 7, 2017 |
| Python 3.6 | 3.6.2 | Python 3.6 3.6.2 | Jul 17, 2017 |