libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade expat-develUpgrade xmlrpc-c-develUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-clientUpgrade xmlrpc-c-client++Upgrade xmlrpc-cUpgrade expat | Apr 4, 2024 | Feb 4, 2024 |
| Alpine Linux | — | Upgrade expat | Aug 22, 2024 | Feb 4, 2024 |
| Amazon_linux_2023 | — | Upgrade xmlrpc-c-client-debuginfoUpgrade expat-staticUpgrade expat-debugsourceUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-appsUpgrade xmlrpc-c-clientUpgrade xmlrpc-c-apps-debuginfoUpgrade xmlrpc-c-client++-debuginfoUpgrade xmlrpc-cUpgrade expatUpgrade expat-develUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-c++Upgrade expat-debuginfo | Feb 17, 2025 | Feb 4, 2024 |
| Debian | — | Upgrade expat | Apr 8, 2024 | Feb 4, 2024 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jul 15, 2026 | Jul 14, 2026 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| F5 Big Ip | — | — | May 20, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade expat | Jul 16, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade expat-develUpgrade expat | Jul 23, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory8 | Apr 12, 2024 | Feb 4, 2024 |
| Ibm Http_server | — | Apply IBM HTTP Server Interim Fix PH59697Apply IBM HTTP Server version 9.0.5.19 or laterApply IBM HTTP Server version 8.5.5.26 or later | Nov 26, 2025 | Mar 5, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade xmlrpc-c-clientUpgrade xmlrpc-c-c++Upgrade expatUpgrade xmlrpc-cUpgrade expat-develUpgrade xmlrpc-c-client++ | Mar 27, 2024 | Feb 4, 2024 |
| Redhat_linux | — | Upgrade xmlrpc-c-develUpgrade expat-develNo solution existsUpgrade xmlrpc-cUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-debugsourceUpgrade expat-debuginfoUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-apps-debuginfoUpgrade xmlrpc-c-debuginfoUpgrade expat-debugsourceUpgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-client-debuginfoUpgrade expat | Mar 27, 2024 | Feb 4, 2024 |
| Rocky_linux | — | Upgrade expat-develUpgrade xmlrpc-c-clientUpgrade expat-debugsourceUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-c++-debuginfoUpgrade expat-debuginfoUpgrade xmlrpc-c-debugsourceUpgrade xmlrpc-c-develUpgrade xmlrpc-c-client++-debuginfoUpgrade xmlrpc-cUpgrade expatUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-c-c++ | Apr 8, 2024 | Feb 4, 2024 |
| Suse | — | Upgrade python-gdbmUpgrade python-tkUpgrade libpython3_6m1_0Upgrade libpython3_9-1_0Upgrade libexpat1Upgrade python3-develUpgrade python-32bitUpgrade python39-develUpgrade python311-docUpgrade python310-develUpgrade python39-cursesUpgrade python311-baseUpgrade python-baseUpgrade python36-develUpgrade python39-baseUpgrade python39Upgrade libexpat-devel-32bitUpgrade python3-baseUpgrade python3-idleUpgrade python39-tkUpgrade python310-32bitUpgrade libpython2_7-1_0Upgrade python3-dbmUpgrade python310-dbmUpgrade python311-toolsUpgrade python36-baseUpgrade libpython3_4m1_0-32bitUpgrade libexpat-develUpgrade python-cursesUpgrade python36Upgrade python-idleUpgrade python311Upgrade python39-toolsUpgrade python3-tkUpgrade pythonUpgrade python311-tkUpgrade libpython3_4m1_0Upgrade libpython3_11-1_0Upgrade libpython3_10-1_0Upgrade python310-baseUpgrade python310-testsuiteUpgrade python-doc-pdfUpgrade libexpat1-32bitUpgrade python39-idleUpgrade python39-32bitUpgrade python310-idleUpgrade python-xmlUpgrade python-docUpgrade python311-dbmUpgrade python311-cursesUpgrade python39-docUpgrade expatUpgrade python3-cursesUpgrade python310-base-32bitUpgrade python-base-32bitUpgrade python3-docUpgrade python310-tkUpgrade python3Upgrade libpython3_6m1_0-32bitUpgrade python311-testsuiteUpgrade python39-testsuiteUpgrade python39-dbmUpgrade python311-develUpgrade python3-testsuiteUpgrade python311-idleUpgrade python311-doc-devhelpUpgrade python311-base-32bitUpgrade python310-docUpgrade python310Upgrade libpython3_10-1_0-32bitUpgrade python-demoUpgrade python-develUpgrade python310-doc-devhelpUpgrade libpython2_7-1_0-32bitUpgrade python310-toolsUpgrade python310-cursesUpgrade python3-toolsUpgrade python3-doc-devhelpUpgrade libpython3_9-1_0-32bitUpgrade libpython3_11-1_0-32bitUpgrade python39-doc-devhelpUpgrade python39-base-32bitUpgrade python311-32bit | Mar 28, 2024 | Feb 4, 2024 |
| Ubuntu | — | Upgrade expatUpgrade libexpat1 | Mar 15, 2024 | Feb 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub