libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.

CPENameOperatorVersion
libexpatle2.5.0

CPE	Name	Operator	Version
	libexpat	le	2.5.0

References

github.com/libexpat/libexpat/pull/789

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNUBSGZFEZOBHJFTAD42SAN4ATW2VEMV/

ibm 12

fedora 8

cbl_mariner 1

oraclelinux 2

openvas 27

cve 1

redhat 25

osv 6

nessus 30

cvelist 1

f5 1

ubuntucve 1

almalinux 2

rocky 1

debian 1

nvd 1

debiancve 1

redhatcve 1

alpinelinux 1

veracode 1

slackware 2

cloudfoundry 1

ubuntu 1

mageia 1

aix 1

photon 2

ibm

Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2023-52425)

2024-03-14 13:49:14

Security Bulletin: IBM HTTP Server is vulnerable to a denial of service due to libexpat (CVE-2023-52425)

2024-03-05 15:45:06

Security Bulletin: Denial of Service vulnerability in IBM HTTP Server used by WebSphere Application Server affects IBM Business Automation Workflow (CVE-2023-52425)

2024-03-27 15:46:43

fedora

[SECURITY] Fedora 40 Update: thunderbird-115.9.0-1.fc40

2024-03-27 00:15:35

[SECURITY] Fedora 39 Update: thunderbird-115.10.1-4.fc39

2024-04-25 01:21:42

[SECURITY] Fedora 38 Update: thunderbird-115.9.0-1.fc38

2024-03-28 01:44:07

cbl_mariner

CVE-2023-52425 affecting package expat for versions less than 2.6.2-2

2024-04-09 20:48:36

oraclelinux

expat security update

2024-04-03 00:00:00

expat security update

2024-03-26 00:00:00

openvas

Fedora: Security Advisory for thunderbird (FEDORA-2024-fc2ae12c31)

2024-03-27 00:00:00

SUSE: Security Advisory (SUSE-SU-2024:1657-1)

2024-05-15 00:00:00

Fedora: Security Advisory for thunderbird (FEDORA-2024-15b892ebd3)

2024-05-27 00:00:00

cve

CVE-2023-52425

2024-02-04 20:15:46

redhat

(RHSA-2024:1615) Moderate: expat security update

2024-04-02 17:25:56

(RHSA-2024:2575) Moderate: expat security update

2024-04-30 14:00:06

(RHSA-2024:2839) Moderate: expat security update

2024-05-14 15:06:08

osv

Moderate: expat security update

2024-04-02 00:00:00

expat - security update

2024-04-07 00:00:00

Moderate: expat security update

2024-04-05 14:55:53

nessus

Rocky Linux 8 : expat (RLSA-2024:1615)

2024-04-05 00:00:00

F5 Networks BIG-IP : Expat vulnerability (K000139630)

2024-05-16 00:00:00

CentOS 8 : expat (CESA-2024:1615)

2024-04-02 00:00:00

cvelist

CVE-2023-52425

2024-02-04 00:00:00

K000139630: Expat vulnerability CVE-2023-52425

2024-05-16 00:00:00

ubuntucve

CVE-2023-52425

2024-02-04 00:00:00

almalinux

Moderate: expat security update

2024-04-02 00:00:00

Moderate: expat security update

2024-03-26 00:00:00

rocky

expat security update

2024-04-05 14:55:53

debian

[SECURITY] [DLA 3783-1] expat security update

2024-04-09 04:41:36

nvd

CVE-2023-52425

2024-02-04 20:15:46

debiancve

CVE-2023-52425

2024-02-04 20:15:46

redhatcve

CVE-2023-52425

2024-02-05 23:59:53

alpinelinux

CVE-2023-52425

2024-02-04 20:15:46

veracode

Denial Of Service

2024-02-11 08:46:00

slackware

[slackware-security] expat

2024-02-07 20:13:19

[slackware-security] python3

2024-03-20 21:14:26

cloudfoundry

USN-6694-1: Expat vulnerabilities | Cloud Foundry

2024-04-04 00:00:00

ubuntu

Expat vulnerabilities

2024-03-14 00:00:00

mageia

Updated expat packages fix security vulnerabilities

2024-03-18 19:12:23

aix

AIX is affected by multiple vulnerabilities due to Python (CVE-2023-52425 CVE-2023-52426 CVE-2023-6597)

2024-04-11 15:29:16

photon

Important Photon OS Security Update - PHSA-2024-4.0-0581

2024-03-20 00:00:00

Important Photon OS Security Update - PHSA-2024-5.0-0216

2024-02-29 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.0%

JSON

Related for PRION:CVE-2023-52425