Lucene search
OracleLinuxELSA-2024-1530HistoryMar 26, 2024 - 12:00 a.m.
expat security update
2024-03-2600:00:00
linux.oracle.com
9
expat
security
update
cve
parsing
large tokens
parameter entity
recursion
resolves
rhel-29698
rhel-29695
unix
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
38.0%
[2.5.0-1.1]
- CVE-2023-52425: Fix parsing of large tokens
- CVE-2024-28757: Reject direct parameter entity recursion
- Resolves: RHEL-29698
- Resolves: RHEL-29695
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 9 | src | expat | < 2.5.0-1.el9_3.1 | expat-2.5.0-1.el9_3.1.src.rpm |
| oracle linux | 9 | src | expat | < 2.5.0-1.el9_3.1 | expat-2.5.0-1.el9_3.1.src.rpm |
| oracle linux | 9 | aarch64 | expat | < 2.5.0-1.el9_3.1 | expat-2.5.0-1.el9_3.1.aarch64.rpm |
| oracle linux | 9 | aarch64 | expat-devel | < 2.5.0-1.el9_3.1 | expat-devel-2.5.0-1.el9_3.1.aarch64.rpm |
| oracle linux | 9 | src | expat | < 2.5.0-1.el9_3.1 | expat-2.5.0-1.el9_3.1.src.rpm |
| oracle linux | 9 | src | expat | < 2.5.0-1.el9_3.1 | expat-2.5.0-1.el9_3.1.src.rpm |
| oracle linux | 9 | i686 | expat | < 2.5.0-1.el9_3.1 | expat-2.5.0-1.el9_3.1.i686.rpm |
| oracle linux | 9 | x86_64 | expat | < 2.5.0-1.el9_3.1 | expat-2.5.0-1.el9_3.1.x86_64.rpm |
| oracle linux | 9 | i686 | expat-devel | < 2.5.0-1.el9_3.1 | expat-devel-2.5.0-1.el9_3.1.i686.rpm |
| oracle linux | 9 | x86_64 | expat-devel | < 2.5.0-1.el9_3.1 | expat-devel-2.5.0-1.el9_3.1.x86_64.rpm |
Related
almalinux
almalinux
Moderate: expat security update
2024-03-26 00:00:00
Moderate: expat security update
2024-04-02 00:00:00
nessus
nessus
RHEL 9 : expat (RHSA-2024:3926)
2024-06-13 00:00:00
Ubuntu 22.04 LTS / 23.10 : Expat vulnerabilities (USN-6694-1)
2024-03-14 00:00:00
mageia
mageia
Updated expat packages fix security vulnerabilities
2024-03-18 19:12:23
osv
osv
Moderate: expat security update
2024-03-26 00:00:00
expat vulnerabilities
2024-03-14 10:19:40
CVE-2024-28757
2024-03-10 05:15:06
openvas
openvas
openSUSE: Security Advisory for expat (SUSE-SU-2024:1129-1)
2024-04-09 00:00:00
Ubuntu: Security Advisory (USN-6694-1)
2024-03-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1129-1)
2024-05-07 00:00:00
ubuntu
ubuntu
Expat vulnerabilities
2024-03-14 00:00:00
cloudfoundry
cloudfoundry
USN-6694-1: Expat vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
redhat
redhat
(RHSA-2024:1530) Moderate: expat security update
2024-03-26 16:30:26
(RHSA-2024:2633) Important: updated rhceph-6.1 container image
2024-05-01 01:13:16
(RHSA-2024:2575) Moderate: expat security update
2024-04-30 14:00:06
fedora
fedora
[SECURITY] Fedora 40 Update: mingw-expat-2.6.1-1.fc40
2024-03-23 00:50:46
[SECURITY] Fedora 39 Update: mingw-expat-2.6.1-1.fc39
2024-03-19 01:10:52
[SECURITY] Fedora 38 Update: mingw-expat-2.6.1-1.fc38
2024-03-19 02:00:28
ubuntucve
ubuntucve
CVE-2024-28757
2024-03-10 00:00:00
CVE-2023-52425
2024-02-04 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-28757 affecting package expat for versions less than 2.6.2-2
2024-04-09 20:48:36
CVE-2023-52425 affecting package expat for versions less than 2.6.2-2
2024-04-09 20:48:36
cvelist
cvelist
CVE-2024-28757
2024-03-10 00:00:00
CVE-2023-52425
2024-02-04 00:00:00
nvd
nvd
CVE-2024-28757
2024-03-10 05:15:06
CVE-2023-52425
2024-02-04 20:15:46
f5
f5
K000139637: Expat vulnerability CVE-2024-28757
2024-05-16 00:00:00
K000139630: Expat vulnerability CVE-2023-52425
2024-05-16 00:00:00
ibm
ibm
Security Bulletin: IBM® Db2® NSE (Net Search Extender) is affected by a vulnerability in the open source Expat library. (CVE-2024-28757)
2024-06-11 17:31:41
githubexploit
githubexploit
Exploit for CVE-2024-28757
2024-05-03 04:58:24
Exploit for CVE-2024-28757
2024-05-03 09:21:27
Exploit for CVE-2024-28757
2024-05-03 09:24:51
slackware
slackware
[slackware-security] expat
2024-03-13 19:51:59
[slackware-security] expat
2024-02-07 20:13:19
[slackware-security] python3
2024-03-20 21:14:26
veracode
veracode
XML Entity Expansion
2024-03-11 07:18:06
Denial Of Service
2024-02-11 08:46:00
redos
redos
ROS-20240506-01
2024-05-06 00:00:00
alpinelinux
alpinelinux
CVE-2024-28757
2024-03-10 05:15:06
CVE-2023-52425
2024-02-04 20:15:46
aix
aix
debiancve
debiancve
CVE-2024-28757
2024-03-10 05:15:06
CVE-2023-52425
2024-02-04 20:15:46
redhatcve
redhatcve
CVE-2024-28757
2024-03-10 10:10:35
CVE-2023-52425
2024-02-05 23:59:53
cve
cve
CVE-2024-28757
2024-03-10 05:15:06
CVE-2023-52425
2024-02-04 20:15:46
oraclelinux
oraclelinux
expat security update
2024-04-03 00:00:00
prion
prion
Design/Logic Flaw
2024-02-04 20:15:00
rocky
rocky
expat security update
2024-04-05 14:55:53
debian
debian
[SECURITY] [DLA 3783-1] expat security update
2024-04-09 04:41:36
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0582
2024-03-22 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0229
2024-03-22 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0581
2024-03-20 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
38.0%
Related for ELSA-2024-1530