Denial Of Service

🗓️ 11 Feb 2024 08:46:00Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 30 Views

libexpat vulnerability to denial of service due to multiple buffer fill

Reporter	Title	Published	Views	Family All 365
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2023-52425)	14 Mar 202413:49	–	ibm
IBM Security Bulletins	Security Bulletin: Oracle Outside In Technology (OIT) Security Vulnerabilities - July 2024	5 Mar 202517:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server	27 Jun 202419:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	7 May 202417:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability in IBM HTTP Server used by WebSphere Application Server affects IBM Business Automation Workflow (CVE-2023-52425)	27 Mar 202415:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to a denial of service due to libexpat (CVE-2023-52425)	5 Mar 202415:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Analytics - NPS	11 Jul 202511:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to protobuf-go, libcurl, libexpat, Java SE, IBM GSKit-Crypto, open redirect, buffer overflow condition and golang-fips/openssl vulnerabilities.	30 Apr 202407:19	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been disclosed in Expat, which is installed as part of IBM Tivoli Network Manager (CVE-2023-52425).	21 Mar 202413:05	–	ibm

Vulners

Node

expat expatMatch2.2.10-1debian

AND

expat expatMatch2.4.1-2debian

AND

debian debian_linuxMatch999

expat expatMatch2.4.4-r0os

AND

expat expatMatch2.4.5-r0os

AND

expat expatMatch2.4.8-r0os

AND

expat expatMatch2.4.6-r0os

AND

expat expatMatch2.4.9-r0os

AND

expat expatMatch2.4.2-r0os

AND

expat expatMatch2.5.0-r1os

AND

expat expatMatch2.4.8-r1os

AND

expat expatMatch2.5.0-r2os

AND

expat expatMatch2.2.9-r1os

AND

expat expatMatch2.4.3-r0os

AND

expat expatMatch2.5.0-r0os

AND

expat expatMatch2.3.0-r0os

AND

expat expatMatch2.2.10-r1os

AND

expat expatMatch2.4.1-r0os

AND

expat expatMatch2.4.7-r0os

AND

alpinelinux alpine_linuxMatchedge

expat expatMatch2.4.8-r0os

AND

expat expatMatch2.5.0-r0os

AND

expat expatMatch2.4.9-r0os

AND

alpinelinux alpine_linuxMatch3.16

expat expatMatch2.5.0-r0os

AND

alpinelinux alpine_linuxMatch3.17

expat expatMatch2.5.0-r2os

AND

alpinelinux alpine_linuxMatch3.19

expat expatMatch2.5.0-r1os

AND

alpinelinux alpine_linuxMatch3.18

expat expatMatch2.2.6-2+deb10u1debian

AND

debian debian_linuxMatch10

expat expatMatch2.2.10-1debian

AND

debian debian_linuxMatch11

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2024/04/msg00006.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-52425
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNUBSGZFEZOBHJFTAD42SAN4ATW2VEMV/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/
github	www.github.com/libexpat/libexpat/pull/789
security	www.security.netapp.com/advisory/ntap-20240614-0003/
openwall	www.openwall.com/lists/oss-security/2024/03/20/5

26 Aug 2024 22:53Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

EPSS0.01552

SSVC