libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xmlrpc-c-clientUpgrade xmlrpc-c-client++Upgrade expat-develUpgrade xmlrpc-c-develUpgrade xmlrpc-c-c++Upgrade xmlrpc-cUpgrade expat | Apr 4, 2024 | Feb 4, 2024 |
| Alpine Linux | — | Upgrade expat | Aug 22, 2024 | Feb 4, 2024 |
| Amazon_linux_2023 | — | Upgrade expat-staticUpgrade xmlrpc-cUpgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-c-clientUpgrade xmlrpc-c-apps-debuginfoUpgrade expatUpgrade expat-debugsourceUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-client++-debuginfoUpgrade xmlrpc-c-appsUpgrade expat-debuginfoUpgrade xmlrpc-c-debuginfoUpgrade expat-develUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-c++-debuginfo | Feb 17, 2025 | Feb 4, 2024 |
| Debian | — | Upgrade expat | Apr 8, 2024 | Feb 4, 2024 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jul 15, 2026 | Jul 14, 2026 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| F5 Big Ip | — | — | May 20, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade expat | Jul 16, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade expat-develUpgrade expat | Jul 23, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory8 | Apr 12, 2024 | Feb 4, 2024 |
| Ibm Http_server | — | Apply IBM HTTP Server Interim Fix PH59697Apply IBM HTTP Server version 9.0.5.19 or laterApply IBM HTTP Server version 8.5.5.26 or later | Nov 26, 2025 | Mar 5, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade xmlrpc-c-clientUpgrade expatUpgrade xmlrpc-c-c++Upgrade xmlrpc-cUpgrade expat-develUpgrade xmlrpc-c-client++ | Mar 27, 2024 | Feb 4, 2024 |
| Redhat_linux | — | Upgrade expat-debugsourceUpgrade expatUpgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-c-apps-debuginfoUpgrade xmlrpc-cUpgrade xmlrpc-c-debugsourceUpgrade xmlrpc-c-debuginfoUpgrade expat-debuginfoUpgrade expat-develUpgrade xmlrpc-c-client++No solution existsUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-devel | Mar 27, 2024 | Feb 4, 2024 |
| Rocky_linux | — | Upgrade xmlrpc-c-debugsourceUpgrade expat-develUpgrade xmlrpc-c-clientUpgrade expat-debugsourceUpgrade xmlrpc-c-client++Upgrade expat-debuginfoUpgrade xmlrpc-c-c++-debuginfoUpgrade expatUpgrade xmlrpc-c-c++Upgrade xmlrpc-cUpgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-client++-debuginfoUpgrade xmlrpc-c-devel | Apr 8, 2024 | Feb 4, 2024 |
| Suse | — | Upgrade python3-idleUpgrade python310-dbmUpgrade python311-tkUpgrade python-idleUpgrade pythonUpgrade python3-tkUpgrade libpython3_4m1_0Upgrade python39-toolsUpgrade python39-baseUpgrade python39-cursesUpgrade libpython3_4m1_0-32bitUpgrade python36Upgrade python39-tkUpgrade libpython3_11-1_0Upgrade python310-32bitUpgrade python39Upgrade python3-dbmUpgrade libpython2_7-1_0Upgrade libexpat1Upgrade python-32bitUpgrade python-baseUpgrade python-gdbmUpgrade libpython3_6m1_0Upgrade python3-baseUpgrade python310-baseUpgrade libexpat-devel-32bitUpgrade python311-baseUpgrade python311-toolsUpgrade python36-baseUpgrade python36-develUpgrade libpython3_9-1_0Upgrade python310-develUpgrade python311-docUpgrade libpython3_10-1_0Upgrade python-cursesUpgrade python-tkUpgrade python311Upgrade python3-develUpgrade libexpat-develUpgrade python39-develUpgrade libpython3_10-1_0-32bitUpgrade python311-32bitUpgrade libpython3_6m1_0-32bitUpgrade python39-dbmUpgrade python311-develUpgrade libpython2_7-1_0-32bitUpgrade python3-cursesUpgrade expatUpgrade python-doc-pdfUpgrade python-docUpgrade python310Upgrade python-develUpgrade python-demoUpgrade python3-testsuiteUpgrade python310-cursesUpgrade python3-toolsUpgrade python311-dbmUpgrade python311-cursesUpgrade python310-toolsUpgrade python310-doc-devhelpUpgrade python3-doc-devhelpUpgrade libexpat1-32bitUpgrade python39-docUpgrade libpython3_9-1_0-32bitUpgrade python310-tkUpgrade python310-base-32bitUpgrade python3-docUpgrade python310-testsuiteUpgrade libpython3_11-1_0-32bitUpgrade python-xmlUpgrade python-base-32bitUpgrade python311-idleUpgrade python39-testsuiteUpgrade python311-testsuiteUpgrade python310-idleUpgrade python311-base-32bitUpgrade python310-docUpgrade python311-doc-devhelpUpgrade python3Upgrade python39-doc-devhelpUpgrade python39-32bitUpgrade python39-base-32bitUpgrade python39-idle | Mar 28, 2024 | Feb 4, 2024 |
| Ubuntu | — | Upgrade expatUpgrade libexpat1 | Mar 15, 2024 | Feb 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub