libtiff-devel-32bit-4.7.0-7.1 on GA media (moderate)

libtiff-devel-32bit-4.7.0-7.1 on GA media Announcement ID: openSUSE-SU-2025:15417-1 Rating: moderate Cross-References: CVE-2025-8176 CVE-2025-8177 CVSS scores: CVE-2025-8176 SUSE : 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L CVE-2025-8176 SUSE : 8.4...

Linux Distros Unpatched Vulnerability : CVE-2024-8176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML documen...

CVE-2025-8176

creationtimestamp| type| source ---|---|--- 2025-07-31 21:25:22+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lvc35nusqs2u 2025-08-17 20:00:04+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwmocrd7os2w 2025-08-21 08:10:13+00:00| seen|...

Fedora: Security Advisory (FEDORA-2025-7d08872494)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RockyLinux 8 : expat (RLSA-2025:3913)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:3913 advisory. libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176 Tenable has extracted the preceding description block directly from...

Fedora 42 : libtiff (2025-7d08872494)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7d08872494 advisory. - fix CVE-2025-8176: use after free in tiffmedian rhbz2383821 - fix CVE-2025-8177: buffer oveflow in thumbnail setrow when processing malformed TIFF...

RockyLinux 8 : xmlrpc-c (RLSA-2025:4048)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:4048 advisory. libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176 Tenable has extracted the preceding description block directly from...

expat security update

An update is available for expat. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Expat is a C library for parsing XML documents. Security Fixes: libexpat: expat...

RLSA-2025:3531 Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to th...

xmlrpc-c security update

An update is available for xmlrpc-c. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list XML-RPC is a remote procedure call RPC protocol that uses XML to encode its...

RLSA-2025:3913 Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to th...

CVE-2025-8176

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function gethistogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The exploit has been disclosed to the publi...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2025-1772)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP13 : expat (EulerOS-SA-2025-1701)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2025-1686)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2025-1701)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 10 : expat (ELSA-2025-7512)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7512 advisory. - Fix behavior change caused by fix for CVE-2024-8176 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Security Bulletin: AIX is vulnerable to denial of service and possible code execution due to Perl (CVE-2024-8176, CVE-2024-56406)

Summary Vulnerability in AIX's Perl could allow an attacker to cause a denial of service and possibly execute code CVE-2024-8176, CVE-2024-56406. AIX uses Perl in various operating system components. Vulnerability Details CVEID:CVE-2024-8176 DESCRIPTION: A stack overflow vulnerability exists in t...

AIX is vulnerable to denial of service and possible code execution due to Perl (CVE-2024-8176 CVE-2024-56406)

IBM SECURITY ADVISORY First Issued: Thu Jun 26 08:09:07 CDT 2025 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/perladvisory10.asc Security Bulletin: AIX is vulnerable to denial of service and possible code execution due to Perl...

TencentOS Server 3: expat (TSSA-2025:0310)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0310 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...