libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade expatUpgrade xmlrpc-cUpgrade xmlrpc-c-develUpgrade xmlrpc-c-clientUpgrade xmlrpc-c-client++Upgrade expat-develUpgrade xmlrpc-c-c++ | Apr 4, 2024 | Feb 4, 2024 |
| Alpine Linux | — | Upgrade expat | Aug 22, 2024 | Feb 4, 2024 |
| Amazon_linux_2023 | — | Upgrade xmlrpc-c-c++-debuginfoUpgrade expat-develUpgrade xmlrpc-c-c++Upgrade expat-debuginfoUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-clientUpgrade xmlrpc-cUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-appsUpgrade expatUpgrade xmlrpc-c-apps-debuginfoUpgrade expat-staticUpgrade xmlrpc-c-client-debuginfoUpgrade expat-debugsourceUpgrade xmlrpc-c-client++-debuginfo | Feb 17, 2025 | Feb 4, 2024 |
| Debian | — | Upgrade expat | Apr 8, 2024 | Feb 4, 2024 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jul 15, 2026 | Jul 14, 2026 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| F5 Big Ip | — | — | May 20, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade expat | Jul 16, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade expatUpgrade expat-devel | Jul 23, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory8 | Apr 12, 2024 | Feb 4, 2024 |
| Ibm Http_server | — | Apply IBM HTTP Server version 8.5.5.26 or laterApply IBM HTTP Server Interim Fix PH59697Apply IBM HTTP Server version 9.0.5.19 or later | Nov 26, 2025 | Mar 5, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade xmlrpc-c-c++Upgrade expatUpgrade xmlrpc-c-clientUpgrade xmlrpc-c-client++Upgrade xmlrpc-cUpgrade expat-devel | Mar 27, 2024 | Feb 4, 2024 |
| Redhat_linux | — | Upgrade xmlrpc-c-debuginfoUpgrade expat-debuginfoUpgrade xmlrpc-c-apps-debuginfoUpgrade xmlrpc-cUpgrade expat-develUpgrade xmlrpc-c-debugsourceUpgrade xmlrpc-c-c++No solution existsUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-develUpgrade xmlrpc-c-c++-debuginfoUpgrade expatUpgrade expat-debugsourceUpgrade xmlrpc-c-client-debuginfo | Mar 27, 2024 | Feb 4, 2024 |
| Rocky_linux | — | Upgrade xmlrpc-c-client++-debuginfoUpgrade xmlrpc-cUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-client-debuginfoUpgrade expatUpgrade xmlrpc-c-develUpgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-clientUpgrade expat-debugsourceUpgrade xmlrpc-c-client++Upgrade expat-debuginfoUpgrade xmlrpc-c-debugsourceUpgrade expat-devel | Apr 8, 2024 | Feb 4, 2024 |
| Suse | — | Upgrade python310-cursesUpgrade python310-doc-devhelpUpgrade python39-testsuiteUpgrade python39-dbmUpgrade python311-testsuiteUpgrade python311-develUpgrade python310-tkUpgrade python3Upgrade python3-docUpgrade python311-doc-devhelpUpgrade python3-doc-devhelpUpgrade libpython3_9-1_0-32bitUpgrade python-xmlUpgrade python39-idleUpgrade libpython3_6m1_0-32bitUpgrade python310-idleUpgrade python39-docUpgrade python311-dbmUpgrade libpython3_11-1_0-32bitUpgrade python39-doc-devhelpUpgrade python39-base-32bitUpgrade python-doc-pdfUpgrade python-base-32bitUpgrade python311-32bitUpgrade python311-idleUpgrade python310-docUpgrade libpython3_10-1_0-32bitUpgrade python310-base-32bitUpgrade expatUpgrade python3-cursesUpgrade python311-base-32bitUpgrade python310Upgrade libpython2_7-1_0-32bitUpgrade python36Upgrade python39-tkUpgrade libpython3_11-1_0Upgrade python-tkUpgrade python3-idleUpgrade python310-dbmUpgrade libpython3_4m1_0-32bitUpgrade python-idleUpgrade python39-toolsUpgrade python3-develUpgrade libpython3_6m1_0Upgrade python39-develUpgrade python311Upgrade python3-dbmUpgrade libexpat-devel-32bitUpgrade python311-docUpgrade python310-baseUpgrade python310-32bitUpgrade python310-develUpgrade python39-baseUpgrade python3-tkUpgrade python311-baseUpgrade python-32bitUpgrade python-gdbmUpgrade python39-cursesUpgrade libpython2_7-1_0Upgrade python-baseUpgrade libpython3_10-1_0Upgrade python311-toolsUpgrade python311-tkUpgrade libpython3_4m1_0Upgrade python3-baseUpgrade pythonUpgrade libpython3_9-1_0Upgrade libexpat1Upgrade python36-baseUpgrade python36-develUpgrade libexpat-develUpgrade python39Upgrade python-cursesUpgrade python310-testsuiteUpgrade python-docUpgrade python39-32bitUpgrade python310-toolsUpgrade python311-cursesUpgrade python3-toolsUpgrade python-develUpgrade python-demoUpgrade python3-testsuiteUpgrade libexpat1-32bit | Mar 28, 2024 | Feb 4, 2024 |
| Ubuntu | — | Upgrade expatUpgrade libexpat1 | Mar 15, 2024 | Feb 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 4, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub