Lucene search
MitreCVELIST:CVE-2024-28757HistoryMar 10, 2024 - 12:00 a.m.
CVE-2024-28757
2024-03-1000:00:00
mitre
www.cve.org
11
libexpat
xml
entity expansion
attack
external parsers
cve-2024-28757
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
References
www.openwall.com/lists/oss-security/2024/03/15/1
github.com/libexpat/libexpat/issues/839
github.com/libexpat/libexpat/pull/842
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE/
security.netapp.com/advisory/ntap-20240322-0001/
Related
slackware
slackware
[slackware-security] expat
2024-03-13 19:51:59
[slackware-security] python3
2024-09-09 01:06:11
openvas
openvas
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2024-1956)
2024-07-16 00:00:00
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2024-1810)
2024-06-25 00:00:00
Fedora: Security Advisory (FEDORA-2024-afb73e6f62)
2024-03-25 00:00:00
githubexploit
githubexploit
Exploit for CVE-2024-28757
2024-05-03 09:21:27
Exploit for CVE-2024-28757
2024-05-03 04:58:24
Exploit for CVE-2024-28757
2024-05-03 09:24:51
nessus
nessus
Slackware Linux 15.0 / current expat Vulnerability (SSA:2024-073-01)
2024-03-13 00:00:00
EulerOS 2.0 SP9 : expat (EulerOS-SA-2024-1956)
2024-07-16 00:00:00
EulerOS 2.0 SP9 : expat (EulerOS-SA-2024-1929)
2024-07-16 00:00:00
vulnrichment
vulnrichment
CVE-2024-28757
2024-03-10 00:00:00
ubuntucve
ubuntucve
CVE-2024-28757
2024-03-10 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: mingw-expat-2.6.1-1.fc40
2024-03-23 00:50:46
[SECURITY] Fedora 38 Update: mingw-expat-2.6.1-1.fc38
2024-03-19 02:00:28
[SECURITY] Fedora 39 Update: mingw-expat-2.6.1-1.fc39
2024-03-19 01:10:52
osv
osv
expat-2.6.2-1.1 on GA media
2024-06-15 00:00:00
CVE-2024-28757
2024-03-10 05:15:06
Moderate: expat security update
2024-03-26 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-28757 affecting package expat for versions less than 2.6.2-1
2024-06-21 09:32:44
CVE-2024-28757 affecting package expat for versions less than 2.6.2-2
2024-04-09 20:48:36
f5
f5
K000139637: Expat vulnerability CVE-2024-28757
2024-05-16 00:00:00
nvd
nvd
CVE-2024-28757
2024-03-10 05:15:06
ibm
ibm
aix
aix
AIX is affected by information disclosure due to Python (CVE-2024-28757)
2024-06-13 15:37:38
redos
redos
ROS-20240506-01
2024-05-06 00:00:00
veracode
veracode
XML Entity Expansion
2024-03-11 07:18:06
alpinelinux
alpinelinux
CVE-2024-28757
2024-03-10 05:15:06
debiancve
debiancve
CVE-2024-28757
2024-03-10 05:15:06
redhatcve
redhatcve
CVE-2024-28757
2024-03-10 10:10:35
cve
cve
CVE-2024-28757
2024-03-10 05:15:06
redhat
redhat
(RHSA-2024:3926) Moderate: expat security update
2024-06-13 14:14:44
(RHSA-2024:1530) Moderate: expat security update
2024-03-26 16:30:26
cloudfoundry
cloudfoundry
USN-6694-1: Expat vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
almalinux
almalinux
Moderate: expat security update
2024-03-26 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0582
2024-03-22 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0229
2024-03-22 00:00:00
mageia
mageia
Updated expat packages fix security vulnerabilities
2024-03-18 19:12:23
oraclelinux
oraclelinux
expat security update
2024-03-26 00:00:00
ubuntu
ubuntu
Expat vulnerabilities
2024-03-14 00:00:00
ics
ics
Siemens SINEC NMS
2024-08-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00