Fedora 37 : expat (2022-c8c2e402fb)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-c8c2e402fb advisory. Rebase to 2.5.0 ---- Rebase to 2.4.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora 41 : expat (2024-ccc5045ab9)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ccc5045ab9 advisory. Rebase to version 2.6.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

RHEL 8 : expat (RHSA-2024:9502)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9502 advisory. Expat is a C library for parsing XML documents. Security Fixes: libexpat: expat: DoS via XMLResumeParser CVE-2024-50602 For more details about the...

CentOS 9 : expat-2.5.0-4.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the expat-2.5.0-4.el9 build changelog. - An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser function because XMLStopParser can stop/suspend an...

SUSE SLES12 Security Update : expat (SUSE-SU-2024:3968-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:3968-1 advisory. - CVE-2024-50602: Fixed a denial of service via XMLResumeParser bsc1232579. Tenable has extracted the preceding description block directly from the SUS...

CBL Mariner 2.0 Security Update: expat / python3 (CVE-2024-50602)

The version of expat / python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50602 advisory. - An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser...

Slackware Linux 15.0 / current expat Vulnerability (SSA:2024-312-01)

The version of expat installed on the remote host is prior to 2.6.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-312-01 advisory. New expat packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding descriptio...

Photon OS 3.0: Expat PHSA-2022-3.0-0358

An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0358. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Expat PHSA-2022-3.0-0365

An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0365. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Expat PHSA-2022-4.0-0271

An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0271. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Expat PHSA-2022-4.0-0160

An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Expat PHSA-2022-4.0-0153

An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0153. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

F5 Networks BIG-IP : Expat vulnerability (K000139630)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000139630 advisory. - libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in...

F5 Networks BIG-IP : Expat vulnerability (K000139637)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000139637 advisory. - libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created...

SUSE-SU-2024:0782-2 Security update for python311

This update for python311 fixes the following issues: - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory bsc1219666. - CVE-2023-27043: Fixed incorrect e-mqil parsing bsc1210638. - CVE-2022-25236: Fixed an expat vulnerability by supporting expat = 2.4.4 bsc1212015...

SUSE-SU-2024:1129-2 Security update for expat

This update for expat fixes the following issues: - CVE-2023-52425: Fixed a DoS caused by processing large tokens. bsc1219559 - CVE-2024-28757: Fixed an XML Entity Expansion. bsc1221289...

Important: expat

Issue Overview: libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via XMLExternalEntityParserCreate. CVE-2024-28757 Affected Packages: expat Issue Correction: Run dnf update expat --releasever 2023.4.20240401 to update your system...

expat: parsing large tokens can trigger a denial of service

A flaw was found in Expat libexpat. When parsing a large token that requires multiple buffer fills to complete, Expat has to re-parse the token from start numerous times. This process may trigger excessive resource consumption, leading to a denial of service...

openSUSE Security Advisory (SUSE-SU-2024:0784-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:0782-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...