Oracle Linux 9 : expat (ELSA-2025-3531)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3531 advisory. - Improve fix for CVE-2024-8176 - Fix CVE-2024-8176 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

ALSA-2025:3531 Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to th...

CBL Mariner 2.0 Security Update: expat (CVE-2024-8176)

The version of expat installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8176 advisory. - A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity...

CVE-2024-8176 affecting package expat for versions less than 2.6.4-1

CVE-2024-8176 affecting package expat for versions less than 2.6.4-1. A patched version of the package is available...

Fedora 40 : expat (2025-d487e15b69)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d487e15b69 advisory. Rebase to 2.7.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Mageia: Security Advisory (MGASA-2025-0109)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2025-0109 Updated expat packages fix security vulnerability

Improper restriction of xml entity expansion depth in libexpat. CVE-2024-8176 NOTE: upstream deemed this fix incomplete after it was initially pushed. The complete fix was submitted along with the fix for CVE-2025-59375...

Slackware Linux 15.0 / current expat Vulnerability (SSA:2025-073-01)

The version of expat installed on the remote host is prior to 2.7.0. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-073-01 advisory. New expat packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding descripti...

Fedora 41 : expat (2025-20e86a3c86)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-20e86a3c86 advisory. Rebase to 2.7.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

CVE-2024-8176

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash...

CVE-2024-8176 Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash...

CVE-2024-8176

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash...

CVE-2024-8176

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash...

CVE-2024-8176

creationtimestamp| type| source ---|---|--- 2025-03-13 22:12:07+00:00| seen| https://bsky.app/profile/hn100.bsky.social/post/3lkc4ifvrof2m 2025-03-13 22:14:48+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3lkc4nagb7t2r 2025-03-13 22:20:03+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2014-8176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dtls1clearqueues function in ssl/d1lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering...

CVE-2019-8176

creationtimestamp| type| source ---|---|--- 2024-01-16 18:11:36+00:00| seen| https://t.me/ctinow/168931...

Security Bulletin: Multiple vulnerabilities in OpenSSH, GNU C Library (glibc), and OpenSSL, including Logjam, affect Integrated Management Module II (IMM2)

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. This includes Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol CVE-2015-4000. OpenSSL is used by Integrated Management Module II IMM2. Vulnerability Details Summary OpenSSL...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Security Network Intrusion Prevention System

Summary There are multiple vulnerabilities in OpenSSL that is used by IBM Security Network Intrusion Prevention System. These vulnerabilities include CVE-2014-8176, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792, CVE-2015-3216, and CVE-2015-1788. Vulnerability Details CVE ID:...

Security Bulletin: Vulnerabilities in OpenSSL affect multiple N series products

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. OpenSSL is used by multiple N series products. Multiple N series products have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1788 DESCRIPTION: OpenSSL is vulnerable to a denial of servic...

Security Bulletin: Vulnerabilities in Open SSL affect Power Hardware Management Console (CVE-2014-8176,CVE-2015-1788,CVE-2015-1789,CVE-2015-1790,CVE-2015-1791,CVE-2015-1792,CVE-2015-3216)

Summary Open SSL is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs Vulnerability Details CVEID: CVE-2014-8176 DESCRIPTION: OpenSSL could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an invalid free error when...