libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xmlrpc-c-client++Upgrade expat-develUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-clientUpgrade xmlrpc-c-develUpgrade xmlrpc-cUpgrade expat | Apr 4, 2024 | Feb 4, 2024 |
| Alpine Linux | — | Upgrade expat | Aug 22, 2024 | Feb 4, 2024 |
| Amazon_linux_2023 | — | Upgrade expat-debuginfoUpgrade expat-develUpgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-appsUpgrade expatUpgrade xmlrpc-cUpgrade xmlrpc-c-client++-debuginfoUpgrade xmlrpc-c-client-debuginfoUpgrade expat-staticUpgrade expat-debugsourceUpgrade xmlrpc-c-clientUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-apps-debuginfo | Feb 17, 2025 | Feb 4, 2024 |
| Debian | — | Upgrade expat | Apr 8, 2024 | Feb 4, 2024 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jul 15, 2026 | Jul 14, 2026 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| F5 Big Ip | — | — | May 20, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade expat | Jul 16, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade expat-develUpgrade expat | Jul 23, 2024 | Feb 4, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade expat | Oct 8, 2024 | Feb 4, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory8 | Apr 12, 2024 | Feb 4, 2024 |
| Ibm Http_server | — | Apply IBM HTTP Server Interim Fix PH59697Apply IBM HTTP Server version 8.5.5.26 or laterApply IBM HTTP Server version 9.0.5.19 or later | Nov 26, 2025 | Mar 5, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade expat-develUpgrade xmlrpc-cUpgrade xmlrpc-c-client++Upgrade expatUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-client | Mar 27, 2024 | Feb 4, 2024 |
| Redhat_linux | — | Upgrade xmlrpc-c-develUpgrade xmlrpc-cUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-debugsourceUpgrade expat-develUpgrade expat-debuginfoUpgrade xmlrpc-c-debuginfoNo solution existsUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-apps-debuginfoUpgrade expatUpgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-client-debuginfoUpgrade expat-debugsource | Mar 27, 2024 | Feb 4, 2024 |
| Rocky_linux | — | Upgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-cUpgrade xmlrpc-c-client++-debuginfoUpgrade xmlrpc-c-develUpgrade expatUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-clientUpgrade xmlrpc-c-debugsourceUpgrade expat-develUpgrade xmlrpc-c-client++Upgrade expat-debuginfoUpgrade expat-debugsource | Apr 8, 2024 | Feb 4, 2024 |
| Suse | — | Upgrade python311-toolsUpgrade python311Upgrade python39Upgrade python3-dbmUpgrade python310-baseUpgrade python3-baseUpgrade libexpat-develUpgrade python36-develUpgrade python36-baseUpgrade libexpat-devel-32bitUpgrade python-cursesUpgrade python311-docUpgrade python39-baseUpgrade libpython3_10-1_0Upgrade python3-tkUpgrade python39-tkUpgrade python311-baseUpgrade libpython3_11-1_0Upgrade python310-dbmUpgrade python-32bitUpgrade python3-idleUpgrade python36Upgrade python-idleUpgrade python-gdbmUpgrade python-baseUpgrade libpython2_7-1_0Upgrade libpython3_4m1_0-32bitUpgrade pythonUpgrade libpython3_4m1_0Upgrade python-tkUpgrade python39-cursesUpgrade python39-develUpgrade libexpat1Upgrade python311-tkUpgrade libpython3_6m1_0Upgrade python3-develUpgrade libpython3_9-1_0Upgrade python39-toolsUpgrade python310-32bitUpgrade python310-develUpgrade python3-docUpgrade python39-32bitUpgrade python311-base-32bitUpgrade python310-docUpgrade libpython3_10-1_0-32bitUpgrade python310-idleUpgrade python-develUpgrade python310-tkUpgrade python-demoUpgrade python3-testsuiteUpgrade python39-testsuiteUpgrade python310-base-32bitUpgrade python3Upgrade python39-dbmUpgrade python311-testsuiteUpgrade python311-develUpgrade libpython3_11-1_0-32bitUpgrade python39-doc-devhelpUpgrade python39-base-32bitUpgrade python311-32bitUpgrade python311-idleUpgrade python310-testsuiteUpgrade python-doc-pdfUpgrade python-base-32bitUpgrade python310Upgrade libpython2_7-1_0-32bitUpgrade python311-doc-devhelpUpgrade libpython3_9-1_0-32bitUpgrade libexpat1-32bitUpgrade python39-docUpgrade python310-doc-devhelpUpgrade python310-cursesUpgrade python311-dbmUpgrade python311-cursesUpgrade python3-doc-devhelpUpgrade python310-toolsUpgrade python3-toolsUpgrade python3-cursesUpgrade expatUpgrade python-xmlUpgrade python-docUpgrade libpython3_6m1_0-32bitUpgrade python39-idle | Mar 28, 2024 | Feb 4, 2024 |
| Ubuntu | — | Upgrade expatUpgrade libexpat1 | Mar 15, 2024 | Feb 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub