1328 matches found
CVE-2024-28757
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via XMLExternalEntityParserCreate...
UBUNTU-CVE-2024-28757
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via XMLExternalEntityParserCreate...
CVE-2024-28757
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via XMLExternalEntityParserCreate...
PT-2024-2082
Name of the Vulnerable Software and Affected Versions libexpat versions 2.6.1 and earlier libexpat through 2.6.1 Description The issue is related to the improper handling of XML external entity XXE declarations by the XML ExternalEntityParserCreate function, allowing an XML Entity Expansion attac...
IBM HTTP Server 8.5.0.0 < 8.5.5.26 / 9.0.0.0 < 9.0.5.18 DoS (7129933)
The version of IBM HTTP Server running on the remote host is affected by a denaial of service vulnerability. - libexpat is vulnerable to a denial of service, caused by improper system resource allocation. By sending a specially crafted request using an overly large token, a remote attacker could...
Security Bulletin: IBM HTTP Server is vulnerable to a denial of service due to libexpat (CVE-2023-52425)
Summary IBM HTTP Server, which is used by IBM WebSphere Application Server, is vulnerable to a denial of service due to libexpat using a specially crafted request. Vulnerability Details CVEID:CVE-2023-52425 DESCRIPTION: libexpat is vulnerable to a denial of service, caused by improper system...
CentOS 9 : expat-2.5.0-1.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the expat-2.5.0-1.el9 build changelog. - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memo...
CentOS 9 : expat-2.2.10-9.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the expat-2.2.10-9.el9 build changelog. - Large number of prefixed XML attributes on a single tag can crash libexpat CVE-2021-45960 - Integer overflow in doProlog in xmlparse.c...
CentOS 9 : firefox-102.8.0-2.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the firefox-102.8.0-2.el9 build changelog. - xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is...
Fedora 39 : mingw-expat (2024-fbe1f0c1aa)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fbe1f0c1aa advisory. Update to 2.6.0, fixes CVE-2023-52425, CVE-2023-52426. Tenable has extracted the preceding description block directly from the Fedora security...
The vulnerability of the XML syntax analyzer library libexpat, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the XML syntax analyzer library libexpat is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Amazon Linux 2023 : expat, expat-devel, expat-static (ALAS2023-2024-524)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-524 advisory. libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time. CVE-2023-52426 Tenable has extracted the preceding description block directly from the tested product...
XML Entity Expansion
libexpat is vulnerable to XML Entity Expansion . the vulnerability is due to Improper Restriction of Recursive Entity References in DTDs if XMLDTD is undefined at compile time...
Denial Of Service
libexpat is vulnerable of Denial of service. The vulnerability due to many full reparsings are required in the case of a large token for which multiple buffer fills are needed. It leads to the exhaustion of available resources...
libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.
...
CentOS 8 : expat (CESA-2023:0103)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:0103 advisory. - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory...
SUSE CVE-2023-52425
libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for which multiple buffer fills are needed...
CVE-2023-52426
libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...
AZL-34207 CVE-2023-52425 affecting package expat for versions less than 2.6.2-2
libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for which multiple buffer fills are needed...