libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade expatUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-c++Upgrade xmlrpc-c-clientUpgrade expat-develUpgrade xmlrpc-c-develUpgrade xmlrpc-c | Apr 4, 2024 | Feb 4, 2024 |
| Alpine Linux | — | Upgrade expat | Aug 22, 2024 | Feb 4, 2024 |
| Amazon_linux_2023 | — | Upgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-c++-debuginfoUpgrade expat-debuginfoUpgrade xmlrpc-c-c++Upgrade expat-develUpgrade xmlrpc-c-clientUpgrade xmlrpc-cUpgrade expat-staticUpgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-c-client++-debuginfoUpgrade expat-debugsourceUpgrade xmlrpc-c-appsUpgrade xmlrpc-c-client++Upgrade expatUpgrade xmlrpc-c-apps-debuginfo | Feb 17, 2025 | Feb 4, 2024 |
| Debian | — | Upgrade expat | Apr 8, 2024 | Feb 4, 2024 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jul 15, 2026 | Jul 14, 2026 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| F5 Big Ip | — | — | May 20, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade expat | Jul 16, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade expatUpgrade expat-devel | Jul 23, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory8 | Apr 12, 2024 | Feb 4, 2024 |
| Ibm Http_server | — | Apply IBM HTTP Server Interim Fix PH59697Apply IBM HTTP Server version 8.5.5.26 or laterApply IBM HTTP Server version 9.0.5.19 or later | Nov 26, 2025 | Mar 5, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade xmlrpc-c-client++Upgrade expat-develUpgrade xmlrpc-cUpgrade xmlrpc-c-c++Upgrade expatUpgrade xmlrpc-c-client | Mar 27, 2024 | Feb 4, 2024 |
| Redhat_linux | — | Upgrade expat-debuginfoUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-debuginfoUpgrade expat-develUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-develUpgrade xmlrpc-c-debugsourceNo solution existsUpgrade xmlrpc-cUpgrade xmlrpc-c-apps-debuginfoUpgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-client-debuginfoUpgrade expat-debugsourceUpgrade expat | Mar 27, 2024 | Feb 4, 2024 |
| Rocky_linux | — | Upgrade expat-debugsourceUpgrade xmlrpc-c-clientUpgrade expat-develUpgrade xmlrpc-c-debugsourceUpgrade expat-debuginfoUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-cUpgrade xmlrpc-c-client-debuginfoUpgrade expatUpgrade xmlrpc-c-client++-debuginfoUpgrade xmlrpc-c-develUpgrade xmlrpc-c-c++ | Apr 8, 2024 | Feb 4, 2024 |
| Suse | — | Upgrade python3-develUpgrade python310-baseUpgrade python39-cursesUpgrade libpython3_10-1_0Upgrade python39-baseUpgrade python310-develUpgrade python39-develUpgrade libpython3_9-1_0Upgrade python310-32bitUpgrade python311-docUpgrade libexpat1Upgrade libexpat-devel-32bitUpgrade python3-baseUpgrade python3-dbmUpgrade libpython3_6m1_0Upgrade python3-idleUpgrade python310-dbmUpgrade python-tkUpgrade python3-tkUpgrade python36-develUpgrade python39-tkUpgrade python36Upgrade python311Upgrade pythonUpgrade python311-tkUpgrade python-baseUpgrade python311-baseUpgrade libpython2_7-1_0Upgrade python-32bitUpgrade python-gdbmUpgrade libexpat-develUpgrade libpython3_4m1_0Upgrade libpython3_4m1_0-32bitUpgrade python-cursesUpgrade python-idleUpgrade libpython3_11-1_0Upgrade python39Upgrade python311-toolsUpgrade python39-toolsUpgrade python36-baseUpgrade python310-testsuiteUpgrade python-doc-pdfUpgrade python311-idleUpgrade python39-base-32bitUpgrade python39-doc-devhelpUpgrade python311-32bitUpgrade python-base-32bitUpgrade python311-doc-devhelpUpgrade libpython2_7-1_0-32bitUpgrade libpython3_10-1_0-32bitUpgrade libpython3_6m1_0-32bitUpgrade python311-base-32bitUpgrade python310-docUpgrade python310Upgrade libexpat1-32bitUpgrade python39-docUpgrade python311-dbmUpgrade python311-cursesUpgrade python310-toolsUpgrade python310-doc-devhelpUpgrade python3-toolsUpgrade python3-doc-devhelpUpgrade libpython3_9-1_0-32bitUpgrade python310-cursesUpgrade python3-testsuiteUpgrade python-develUpgrade python-demoUpgrade python310-base-32bitUpgrade python3Upgrade python39-idleUpgrade python-docUpgrade python39-32bitUpgrade python-xmlUpgrade python3-cursesUpgrade expatUpgrade python39-testsuiteUpgrade python311-develUpgrade python39-dbmUpgrade python311-testsuiteUpgrade python310-tkUpgrade python310-idleUpgrade python3-docUpgrade libpython3_11-1_0-32bit | Mar 28, 2024 | Feb 4, 2024 |
| Ubuntu | — | Upgrade expatUpgrade libexpat1 | Mar 15, 2024 | Feb 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub