libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade expatUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-clientUpgrade xmlrpc-cUpgrade expat-develUpgrade xmlrpc-c-develUpgrade xmlrpc-c-c++ | Apr 4, 2024 | Feb 4, 2024 |
| Alpine Linux | — | Upgrade expat | Aug 22, 2024 | Feb 4, 2024 |
| Amazon_linux_2023 | — | Upgrade xmlrpc-c-debuginfoUpgrade expat-develUpgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-c++Upgrade expat-debuginfoUpgrade expatUpgrade expat-debugsourceUpgrade xmlrpc-c-client++-debuginfoUpgrade xmlrpc-c-client++Upgrade xmlrpc-cUpgrade xmlrpc-c-apps-debuginfoUpgrade xmlrpc-c-client-debuginfoUpgrade expat-staticUpgrade xmlrpc-c-appsUpgrade xmlrpc-c-client | Feb 17, 2025 | Feb 4, 2024 |
| Debian | — | Upgrade expat | Apr 8, 2024 | Feb 4, 2024 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jul 15, 2026 | Jul 14, 2026 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| F5 Big Ip | — | — | May 20, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade expat | Jul 16, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade expatUpgrade expat-devel | Jul 23, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory8 | Apr 12, 2024 | Feb 4, 2024 |
| Ibm Http_server | — | Apply IBM HTTP Server version 8.5.5.26 or laterApply IBM HTTP Server Interim Fix PH59697Apply IBM HTTP Server version 9.0.5.19 or later | Nov 26, 2025 | Mar 5, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade xmlrpc-cUpgrade expat-develUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-clientUpgrade expatUpgrade xmlrpc-c-c++ | Mar 27, 2024 | Feb 4, 2024 |
| Redhat_linux | — | Upgrade xmlrpc-c-c++-debuginfoUpgrade expatUpgrade expat-debugsourceUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-debugsourceUpgrade xmlrpc-c-c++Upgrade expat-debuginfoUpgrade xmlrpc-c-apps-debuginfoUpgrade xmlrpc-c-develUpgrade expat-develNo solution existsUpgrade xmlrpc-c-client++Upgrade xmlrpc-cUpgrade xmlrpc-c-client-debuginfo | Mar 27, 2024 | Feb 4, 2024 |
| Rocky_linux | — | Upgrade xmlrpc-c-debuginfoUpgrade xmlrpc-cUpgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-c-client++-debuginfoUpgrade expatUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-develUpgrade xmlrpc-c-debugsourceUpgrade expat-debugsourceUpgrade xmlrpc-c-clientUpgrade expat-debuginfoUpgrade xmlrpc-c-client++Upgrade expat-develUpgrade xmlrpc-c-c++-debuginfo | Apr 8, 2024 | Feb 4, 2024 |
| Suse | — | Upgrade python3-docUpgrade python310-tkUpgrade python3Upgrade python-doc-pdfUpgrade python39-base-32bitUpgrade libpython3_11-1_0-32bitUpgrade python311-doc-devhelpUpgrade libpython2_7-1_0-32bitUpgrade expatUpgrade libpython3_10-1_0-32bitUpgrade python39-32bitUpgrade python39-idleUpgrade python3-cursesUpgrade python310Upgrade python3-testsuiteUpgrade libpython3_6m1_0-32bitUpgrade python-develUpgrade python-xmlUpgrade python311-cursesUpgrade python-demoUpgrade python310-idleUpgrade python310-docUpgrade python3-toolsUpgrade python310-cursesUpgrade python3-doc-devhelpUpgrade python310-doc-devhelpUpgrade python310-toolsUpgrade python311-dbmUpgrade libpython3_9-1_0-32bitUpgrade python39-docUpgrade python311-testsuiteUpgrade python311-develUpgrade python-docUpgrade python39-dbmUpgrade python39-testsuiteUpgrade libexpat1-32bitUpgrade python311-base-32bitUpgrade python-base-32bitUpgrade python310-base-32bitUpgrade python39-doc-devhelpUpgrade python310-testsuiteUpgrade python311-32bitUpgrade python311-idleUpgrade python39Upgrade python3-develUpgrade python3-tkUpgrade python3-baseUpgrade libexpat1Upgrade python39-develUpgrade libpython3_9-1_0Upgrade libpython3_6m1_0Upgrade pythonUpgrade python-cursesUpgrade libexpat-develUpgrade python311-toolsUpgrade python311Upgrade libpython2_7-1_0Upgrade python39-tkUpgrade python36Upgrade python310-dbmUpgrade python3-idleUpgrade python-tkUpgrade libpython3_11-1_0Upgrade python310-32bitUpgrade python39-cursesUpgrade python39-baseUpgrade python311-docUpgrade python310-develUpgrade python-32bitUpgrade python36-develUpgrade python311-baseUpgrade python-gdbmUpgrade python-baseUpgrade python39-toolsUpgrade python311-tkUpgrade libpython3_10-1_0Upgrade libexpat-devel-32bitUpgrade libpython3_4m1_0-32bitUpgrade python-idleUpgrade libpython3_4m1_0Upgrade python36-baseUpgrade python310-baseUpgrade python3-dbm | Mar 28, 2024 | Feb 4, 2024 |
| Ubuntu | — | Upgrade libexpat1Upgrade expat | Mar 15, 2024 | Feb 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub