In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw64-expatUpgrade mingw32-expat | May 4, 2022 | Jun 24, 2019 |
| Alpine Linux | — | Upgrade expat | Jul 3, 2019 | Jun 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade expat-develUpgrade expatUpgrade expat-debuginfoUpgrade expat-static | Oct 28, 2020 | Jun 24, 2019 |
| Amazon_linux | — | Upgrade expat | Dec 19, 2020 | Jun 24, 2019 |
| Centos_linux | — | Upgrade expat-debugsourceUpgrade expat-staticUpgrade expat-debuginfoUpgrade expat-develUpgrade expat | Oct 1, 2020 | Jun 24, 2019 |
| Debian | — | Upgrade expat | Jul 2, 2019 | Jun 24, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 18, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/expat. | Nov 25, 2019 | Jun 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade expat-develUpgrade expat | Sep 12, 2019 | Jun 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade expat-develUpgrade expat | Sep 25, 2019 | Jun 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade expat-develUpgrade expat | Jul 24, 2019 | Jun 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade expat-develUpgrade expat | Jul 26, 2019 | Jun 24, 2019 |
| Ibm Http_server | — | Apply IBM HTTP Server Interim Fix PH14974 | Nov 5, 2019 | Jun 24, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jun 24, 2019 | Jun 24, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade library/expat to version 2.2.7-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jun 24, 2019 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 33416868 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33412599 for version 12.2.1.3.0. | Feb 28, 2022 | Jun 24, 2019 |
| Oracle_linux | — | Upgrade expat-develUpgrade expatUpgrade expat-static | Oct 7, 2020 | Jun 24, 2019 |
| Redhat_linux | — | No solution existsUpgrade mingw64-expatUpgrade expat-staticUpgrade expat-debugsourceUpgrade expatUpgrade expat-debuginfoUpgrade expat-develUpgrade mingw64-expat-debuginfoUpgrade mingw32-expatUpgrade mingw32-expat-debuginfo | Oct 1, 2020 | Jun 24, 2019 |
| Rocky_linux | — | Upgrade expat-debugsourceUpgrade expatUpgrade expat-debuginfoUpgrade expat-devel | Mar 12, 2024 | Jun 24, 2019 |
| Suse | — | Upgrade libexpat1-32bitUpgrade expatUpgrade libexpat-devel-32bitUpgrade libexpat-develUpgrade libexpat1 | Jul 14, 2019 | Jun 24, 2019 |
| Ubuntu | — | Upgrade libxmltok1t64 (Ubuntu Pro)Upgrade lib64expat1Upgrade lib64expat1 (Ubuntu Pro)Upgrade libxmltok1t64Upgrade libvtk5.10 (Ubuntu Pro)Upgrade libexpat1Upgrade libvtk5.8 (Ubuntu Pro)Upgrade libxmltok1 (Ubuntu Pro)Upgrade libexpat1 (Ubuntu Pro) | Jun 26, 2019 | Jun 24, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub