libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xmlrpc-c-c++Upgrade xmlrpc-cUpgrade xmlrpc-c-develUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-clientUpgrade expat-develUpgrade expat | Apr 4, 2024 | Feb 4, 2024 |
| Alpine Linux | — | Upgrade expat | Aug 22, 2024 | Feb 4, 2024 |
| Amazon_linux_2023 | — | Upgrade xmlrpc-c-client++-debuginfoUpgrade expat-debugsourceUpgrade xmlrpc-c-appsUpgrade xmlrpc-cUpgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-c-client++Upgrade expat-staticUpgrade xmlrpc-c-apps-debuginfoUpgrade expatUpgrade xmlrpc-c-clientUpgrade xmlrpc-c-c++Upgrade expat-debuginfoUpgrade expat-develUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-c++-debuginfo | Feb 17, 2025 | Feb 4, 2024 |
| Debian | — | Upgrade expat | Apr 8, 2024 | Feb 4, 2024 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jul 15, 2026 | Jul 14, 2026 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| F5 Big Ip | — | — | May 20, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade expat | Jul 16, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade expatUpgrade expat-devel | Jul 23, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory8 | Apr 12, 2024 | Feb 4, 2024 |
| Ibm Http_server | — | Apply IBM HTTP Server version 8.5.5.26 or laterApply IBM HTTP Server version 9.0.5.19 or laterApply IBM HTTP Server Interim Fix PH59697 | Nov 26, 2025 | Mar 5, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade expat-develUpgrade xmlrpc-c-client++Upgrade xmlrpc-cUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-clientUpgrade expat | Mar 27, 2024 | Feb 4, 2024 |
| Redhat_linux | — | Upgrade expat-debugsourceUpgrade expatUpgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-apps-debuginfoUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-debugsourceNo solution existsUpgrade expat-debuginfoUpgrade xmlrpc-cUpgrade expat-develUpgrade xmlrpc-c-devel | Mar 27, 2024 | Feb 4, 2024 |
| Rocky_linux | — | Upgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-c-debuginfoUpgrade expatUpgrade xmlrpc-c-develUpgrade xmlrpc-c-c++Upgrade xmlrpc-cUpgrade xmlrpc-c-client++-debuginfoUpgrade expat-debugsourceUpgrade xmlrpc-c-clientUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-c++-debuginfoUpgrade expat-debuginfoUpgrade expat-develUpgrade xmlrpc-c-debugsource | Apr 8, 2024 | Feb 4, 2024 |
| Suse | — | Upgrade python311-docUpgrade libpython3_10-1_0Upgrade python39-cursesUpgrade python3-baseUpgrade python-idleUpgrade libpython3_4m1_0-32bitUpgrade python36-baseUpgrade libexpat-devel-32bitUpgrade python310-baseUpgrade python311-tkUpgrade pythonUpgrade libpython3_6m1_0Upgrade python39-baseUpgrade python310-dbmUpgrade python36Upgrade python-tkUpgrade python310-develUpgrade python-baseUpgrade python39-tkUpgrade python-32bitUpgrade libpython3_11-1_0Upgrade python36-develUpgrade libpython2_7-1_0Upgrade python3-idleUpgrade python39-toolsUpgrade python311-baseUpgrade python39Upgrade python-gdbmUpgrade python39-develUpgrade libpython3_4m1_0Upgrade python3-dbmUpgrade libexpat-develUpgrade python-cursesUpgrade python311-toolsUpgrade libexpat1Upgrade python310-32bitUpgrade libpython3_9-1_0Upgrade python3-tkUpgrade python3-develUpgrade python311Upgrade expatUpgrade python311-dbmUpgrade python311-cursesUpgrade python310Upgrade libpython2_7-1_0-32bitUpgrade python311-base-32bitUpgrade python-base-32bitUpgrade python-doc-pdfUpgrade libpython3_11-1_0-32bitUpgrade python39-doc-devhelpUpgrade python39-base-32bitUpgrade python311-idleUpgrade python311-32bitUpgrade python310-testsuiteUpgrade python3-cursesUpgrade python3-testsuiteUpgrade python310-cursesUpgrade python310-base-32bitUpgrade python3-docUpgrade python3Upgrade python310-tkUpgrade python-demoUpgrade python-develUpgrade libpython3_6m1_0-32bitUpgrade python39-idleUpgrade python39-32bitUpgrade python311-testsuiteUpgrade python311-develUpgrade python39-testsuiteUpgrade python-xmlUpgrade python310-toolsUpgrade python3-toolsUpgrade libpython3_9-1_0-32bitUpgrade python310-docUpgrade libpython3_10-1_0-32bitUpgrade python311-doc-devhelpUpgrade python39-docUpgrade python3-doc-devhelpUpgrade python-docUpgrade libexpat1-32bitUpgrade python310-doc-devhelpUpgrade python310-idleUpgrade python39-dbm | Mar 28, 2024 | Feb 4, 2024 |
| Ubuntu | — | Upgrade libexpat1Upgrade expat | Mar 15, 2024 | Feb 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub