Lucene search
Ubuntu.comUB:CVE-2023-52425HistoryFeb 04, 2024 - 12:00 a.m.
CVE-2023-52425
2024-02-0400:00:00
ubuntu.com
ubuntu.com
29
libexpat
denial of service
resource consumption
large token
buffer fills
debian
paraview
xotcl
poco
gdcm
audacity
simgear
coin3
sitecopy
insighttoolkit
apache2
apr-util
cmake
ghostscript
firefox
unix
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
38.0%
libexpat through 2.5.0 allows a denial of service (resource consumption)
because many full reparsings are required in the case of a large token for
which multiple buffer fills are needed.
Bugs
Notes
| Author | Note |
|---|---|
| sbeattie | paraview uses system expat xotcl uses system expat poco uses system expat gdcm uses system expat audacity uses system expat simgear uses system expat coin3 uses system expat as of 4.0.0~CMake~6f54f1602475+ds1-1 sitecopy uses system expat since 1:0.16.0-1 (dapper!) insighttoolkit uses system expat as of 4.12.1-dfsg1 |
| mdeslaur | apache2 uses system expat apr-util uses system expat cmake uses system expat ghostscript uses system expat firefox uses system expat |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 16.04 | noarch | ayttm | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | cableswig | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | cadaver | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | cadaver | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | cadaver | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | cadaver | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | cadaver | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | cadaver | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | coin3 | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | coin3 | < any | UNKNOWN |
Related
f5
f5
K000139630: Expat vulnerability CVE-2023-52425
2024-05-16 00:00:00
cve
cve
CVE-2023-52425
2024-02-04 20:15:46
fedora
fedora
[SECURITY] Fedora 38 Update: thunderbird-115.9.0-1.fc38
2024-03-28 01:44:07
[SECURITY] Fedora 40 Update: thunderbird-115.9.0-1.fc40
2024-03-27 00:15:35
[SECURITY] Fedora 39 Update: thunderbird-115.10.1-4.fc39
2024-04-25 01:21:42
redhat
redhat
(RHSA-2024:1615) Moderate: expat security update
2024-04-02 17:25:56
(RHSA-2024:2575) Moderate: expat security update
2024-04-30 14:00:06
(RHSA-2024:2839) Moderate: expat security update
2024-05-14 15:06:08
osv
osv
Moderate: expat security update
2024-04-02 00:00:00
expat - security update
2024-04-07 00:00:00
Moderate: expat security update
2024-04-05 14:55:53
nessus
nessus
Rocky Linux 8 : expat (RLSA-2024:1615)
2024-04-05 00:00:00
F5 Networks BIG-IP : Expat vulnerability (K000139630)
2024-05-16 00:00:00
CentOS 8 : expat (CESA-2024:1615)
2024-04-02 00:00:00
cvelist
cvelist
CVE-2023-52425
2024-02-04 00:00:00
openvas
openvas
Fedora: Security Advisory for thunderbird (FEDORA-2024-15b892ebd3)
2024-05-27 00:00:00
Fedora: Security Advisory for thunderbird (FEDORA-2024-fc2ae12c31)
2024-03-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1657-1)
2024-05-15 00:00:00
ibm
ibm
cbl_mariner
cbl_mariner
CVE-2023-52425 affecting package expat for versions less than 2.6.2-2
2024-04-09 20:48:36
oraclelinux
oraclelinux
expat security update
2024-04-03 00:00:00
expat security update
2024-03-26 00:00:00
almalinux
almalinux
Moderate: expat security update
2024-04-02 00:00:00
Moderate: expat security update
2024-03-26 00:00:00
rocky
rocky
expat security update
2024-04-05 14:55:53
debian
debian
[SECURITY] [DLA 3783-1] expat security update
2024-04-09 04:41:36
nvd
nvd
CVE-2023-52425
2024-02-04 20:15:46
prion
prion
Design/Logic Flaw
2024-02-04 20:15:00
debiancve
debiancve
CVE-2023-52425
2024-02-04 20:15:46
redhatcve
redhatcve
CVE-2023-52425
2024-02-05 23:59:53
alpinelinux
alpinelinux
CVE-2023-52425
2024-02-04 20:15:46
veracode
veracode
Denial Of Service
2024-02-11 08:46:00
slackware
slackware
[slackware-security] expat
2024-02-07 20:13:19
[slackware-security] python3
2024-03-20 21:14:26
cloudfoundry
cloudfoundry
USN-6694-1: Expat vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
ubuntu
ubuntu
Expat vulnerabilities
2024-03-14 00:00:00
mageia
mageia
Updated expat packages fix security vulnerabilities
2024-03-18 19:12:23
aix
aix
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0581
2024-03-20 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0216
2024-02-29 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
38.0%
Related for UB:CVE-2023-52425