An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xmlrpc-c-develUpgrade xmlrpc-c-client++Upgrade xmlrpc-cUpgrade expatUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-clientUpgrade expat-devel | Sep 23, 2024 | Aug 30, 2024 |
| Alpine Linux | — | Upgrade qt5-qtwebengineUpgrade expatUpgrade qt6-qtwebengine | Oct 1, 2024 | Aug 30, 2024 |
| Debian | — | Upgrade expat | Sep 19, 2024 | Aug 30, 2024 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Sep 23, 2025 | Apr 8, 2025 |
| Freebsd | — | Upgrade expatUpgrade qt6-webengineUpgrade qt5-webengine | Nov 23, 2024 | Nov 23, 2024 |
| Gentoo Linux | — | Upgrade dev-qt/qtwebengine. | Jan 24, 2025 | Aug 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xmlrpc-c-help | Nov 11, 2024 | Aug 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xmlrpc-c-help | Dec 12, 2024 | Aug 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xmlrpc-c-help | Dec 12, 2024 | Aug 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xmlrpc-c-help | Nov 11, 2024 | Aug 30, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory13 | Nov 6, 2024 | Aug 30, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Feb 17, 2025 |
| Oracle_linux | — | Upgrade xmlrpc-cUpgrade expatUpgrade xmlrpc-c-clientUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-c++Upgrade expat-devel | Oct 16, 2024 | Aug 30, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Oct 10, 2024 | Aug 30, 2024 |
| Redhat_linux | — | Upgrade xmlrpc-c-c++Upgrade expatUpgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-c-apps-debuginfoUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-client++No solution existsUpgrade xmlrpc-cUpgrade xmlrpc-c-c++-debuginfoUpgrade expat-debugsourceUpgrade expat-develUpgrade xmlrpc-c-develUpgrade expat-debuginfoUpgrade xmlrpc-c-debugsource | Sep 19, 2024 | Aug 30, 2024 |
| Rocky_linux | rocky-upgrade-expatrocky-upgrade-expat-debuginforocky-upgrade-expat-debugsourcerocky-upgrade-expat-develrocky-upgrade-xmlrpc-crocky-upgrade-xmlrpc-c-c++rocky-upgrade-xmlrpc-c-c++-debuginforocky-upgrade-xmlrpc-c-clientrocky-upgrade-xmlrpc-c-client++rocky-upgrade-xmlrpc-c-client++-debuginforocky-upgrade-xmlrpc-c-client-debuginforocky-upgrade-xmlrpc-c-debuginforocky-upgrade-xmlrpc-c-debugsourcerocky-upgrade-xmlrpc-c-devel | Oct 2, 2024 | Aug 30, 2024 | |
| Suse | — | suse-upgrade-expatsuse-upgrade-libexpat-develsuse-upgrade-libexpat-devel-32bitsuse-upgrade-libexpat1suse-upgrade-libexpat1-32bitsuse-upgrade-libmozjs-115-0suse-upgrade-libmozjs-128-0suse-upgrade-libmozjs-78-0suse-upgrade-mozjs115suse-upgrade-mozjs115-develsuse-upgrade-mozjs128suse-upgrade-mozjs128-develsuse-upgrade-mozjs78suse-upgrade-mozjs78-develsuse-upgrade-x3270 | Dec 5, 2025 | Sep 19, 2024 |
| Ubuntu | ubuntu-pro-upgrade-expatubuntu-pro-upgrade-lib64expat1ubuntu-pro-upgrade-libexpat1ubuntu-pro-upgrade-libxmltok1ubuntu-pro-upgrade-libxmltok1t64ubuntu-upgrade-expatubuntu-upgrade-libexpat1 | Sep 13, 2024 | Aug 30, 2024 | |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub