vulnerability
Ubuntu: (Multiple Advisories) (CVE-2024-45491): Expat vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | Aug 30, 2024 | Sep 13, 2024 | Jan 28, 2025 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Aug 30, 2024
Added
Sep 13, 2024
Modified
Jan 28, 2025
Description
An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).
Solution(s)
ubuntu-pro-upgrade-expatubuntu-pro-upgrade-lib64expat1ubuntu-pro-upgrade-libexpat1ubuntu-pro-upgrade-libxmltok1ubuntu-pro-upgrade-libxmltok1t64
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.