In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-mingw32-expatalma-upgrade-mingw64-expat | May 4, 2022 | Jun 24, 2019 | |
| Alpine Linux | alpine-linux-upgrade-expat | Jul 3, 2019 | Jun 24, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-expatamazon-linux-ami-2-upgrade-expat-debuginfoamazon-linux-ami-2-upgrade-expat-develamazon-linux-ami-2-upgrade-expat-static | Oct 28, 2020 | Jun 24, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-expat | Dec 19, 2020 | Jun 24, 2019 |
| Centos_linux | — | centos-upgrade-expatcentos-upgrade-expat-debuginfocentos-upgrade-expat-debugsourcecentos-upgrade-expat-develcentos-upgrade-expat-static | Oct 1, 2020 | Jun 24, 2019 |
| Debian | debian-upgrade-expat | Jul 2, 2019 | Jun 24, 2019 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Jul 18, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-expat | Nov 25, 2019 | Jun 24, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-expathuawei-euleros-2_0_sp2-upgrade-expat-devel | Sep 12, 2019 | Jun 24, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-expathuawei-euleros-2_0_sp3-upgrade-expat-devel | Sep 25, 2019 | Jun 24, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-expathuawei-euleros-2_0_sp5-upgrade-expat-devel | Jul 24, 2019 | Jun 24, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-expathuawei-euleros-2_0_sp8-upgrade-expat-devel | Jul 26, 2019 | Jun 24, 2019 | |
| Ibm Http_server | — | ibm-http_server-apply-interim-fix-ph14974-for-7_0ibm-http_server-apply-interim-fix-ph14974-for-8_0ibm-http_server-apply-interim-fix-ph14974-for-8_5ibm-http_server-apply-interim-fix-ph14974-for-9_0 | Nov 5, 2019 | Jun 24, 2019 |
| Ibm Was | ibm-was-upgrade-latest | Jun 24, 2019 | Jun 24, 2019 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 19, 2022 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-expat-2-2-7-11-4-14-0-1-1-0 | Oct 16, 2019 | Jun 24, 2019 | |
| Oracle Weblogic | oracle-weblogic-oct-2021-cpu-12_2_1_3_0oracle-weblogic-oct-2021-cpu-12_2_1_4_0 | Feb 28, 2022 | Jun 24, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-expatoracle-linux-upgrade-expat-develoracle-linux-upgrade-expat-static | Oct 7, 2020 | Jun 24, 2019 |
| Redhat_linux | redhat-upgrade-expatredhat-upgrade-expat-debuginforedhat-upgrade-expat-debugsourceredhat-upgrade-expat-develredhat-upgrade-expat-staticredhat-upgrade-mingw32-expatredhat-upgrade-mingw32-expat-debuginforedhat-upgrade-mingw64-expatredhat-upgrade-mingw64-expat-debuginfo | Oct 1, 2020 | Jun 24, 2019 | |
| Rocky_linux | rocky-upgrade-expatrocky-upgrade-expat-debuginforocky-upgrade-expat-debugsourcerocky-upgrade-expat-devel | Mar 12, 2024 | Jun 24, 2019 | |
| Suse | — | suse-upgrade-expatsuse-upgrade-libexpat-develsuse-upgrade-libexpat-devel-32bitsuse-upgrade-libexpat1suse-upgrade-libexpat1-32bit | Jul 14, 2019 | Jun 24, 2019 |
| Ubuntu | ubuntu-pro-upgrade-lib64expat1ubuntu-pro-upgrade-libexpat1ubuntu-pro-upgrade-libvtk5-10ubuntu-pro-upgrade-libvtk5-8ubuntu-pro-upgrade-libxmltok1ubuntu-pro-upgrade-libxmltok1t64ubuntu-upgrade-lib64expat1ubuntu-upgrade-libexpat1ubuntu-upgrade-libxmltok1t64 | Jun 26, 2019 | Jun 24, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub