expat: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 3

• Critical 9.8
  CVE-2024-45490 Public exploit

  An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

  qt6-qtwebengine qt5-qtwebengine insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine Wolfi
  Aug 30, 2024
• High 7.3
  CVE-2024-45491

  An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts o…

  qt6-qtwebengine qt5-qtwebengine insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine Wolfi
  Aug 30, 2024
• High 7.3
  CVE-2024-45492

  An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_gro…

  qt6-qtwebengine qt5-qtwebengine insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine Wolfi
  Aug 30, 2024

Revision history

1. 2026-09-15 #50

   Neue Updates von Dell aufgenommen

2. 2026-04-27 #49

   Neue Updates von IBM aufgenommen

3. 2026-01-06 #48

   Neue Updates von SUSE aufgenommen

4. 2025-12-23 #47

   Neue Updates von SUSE aufgenommen

5. 2025-11-25 #46

   Neue Updates von Oracle Linux aufgenommen

6. 2025-10-26 #45

   Neue Updates von HCL aufgenommen

7. 2025-10-13 #44

   Neue Updates von Dell aufgenommen

8. 2025-10-01 #43

   Neue Updates von Dell aufgenommen

9. 2025-09-08 #42

   Neue Updates aufgenommen

10. 2025-08-31 #41

    Neue Updates von Dell aufgenommen

11. 2025-08-04 #40

    Neue Updates von Dell aufgenommen

12. 2025-07-29 #39

    Neue Updates von IBM aufgenommen

13. 2025-06-29 #38

    Neue Updates von NetApp aufgenommen

14. 2025-06-10 #37

    Neue Updates von Siemens aufgenommen

15. 2025-06-04 #36

    Neue Updates von SUSE aufgenommen

16. 2025-06-03 #35

    Neue Updates von SUSE aufgenommen

17. 2025-06-02 #34

    Neue Updates von XEROX aufgenommen

18. 2025-04-10 #33

    Neue Updates aufgenommen

19. 2025-04-08 #32

    Neue Updates von Dell aufgenommen

20. 2025-04-02 #31

    Neue Updates von Red Hat aufgenommen

21. 2025-02-27 #30

    Neue Updates von Dell aufgenommen

22. 2025-02-13 #29

    Neue Updates von BROCADE aufgenommen

23. 2025-01-28 #28

    Neue Updates von IBM aufgenommen

24. 2025-01-09 #27

    Neue Updates von Amazon aufgenommen

25. 2025-01-08 #26

    Neue Updates von Juniper aufgenommen

References

• GitHub Security Advisory GHSA-4hvh-m426-wv8w vom 2024-08-29
  https://github.com/advisories/GHSA-4hvh-m426-wv8w
• GitHub Security Advisory GHSA-784x-7qm2-gp97 vom 2024-08-29
  https://github.com/advisories/GHSA-784x-7qm2-gp97
• GitHub Security Advisory GHSA-5qxm-qvmj-8v79 vom 2024-08-29
  https://github.com/advisories/GHSA-5qxm-qvmj-8v79
• Fedora Security Advisory FEDORA-2024-F27C29C09C vom 2024-09-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f27c29c09c
• Fedora Security Advisory FEDORA-2024-E86A48CD72 vom 2024-09-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-e86a48cd72
• Fedora Security Advisory FEDORA-2024-C7B547BEC5 vom 2024-09-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-c7b547bec5
• Fedora Security Advisory FEDORA-2024-C5D55D5845 vom 2024-09-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-c5d55d5845
• Fedora Security Advisory FEDORA-2024-527052AB76 vom 2024-09-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-527052ab76
• SUSE Security Update SUSE-SU-2024:3182-1 vom 2024-09-09
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019396.html
• Fedora Security Advisory FEDORA-2024-2B163F9201 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-2b163f9201
• Fedora Security Advisory FEDORA-2024-F750328C3B vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f750328c3b
• Fedora Security Advisory FEDORA-2024-39D459DD00 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-39d459dd00
• Fedora Security Advisory FEDORA-2024-7DB9258D37 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-7db9258d37
• Fedora Security Advisory FEDORA-2024-1E6D6F8452 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-1e6d6f8452
• Fedora Security Advisory FEDORA-2024-6DEDBC5CF9 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-6dedbc5cf9
• Fedora Security Advisory FEDORA-2024-7A069F48E4 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-7a069f48e4
• Tenable Security Advisory TNS-2024-16 vom 2024-09-11
  https://de.tenable.com/security/tns-2024-16
• Fedora Security Advisory FEDORA-2024-F652468298 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f652468298
• Tenable Security Advisory TNS-2024-15 vom 2024-09-11
  https://de.tenable.com/security/tns-2024-15
• Fedora Security Advisory FEDORA-2024-308628EBB8 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-308628ebb8
• Tenable Security Advisory TNS-2024-14 vom 2024-09-11
  https://de.tenable.com/security/tns-2024-14
• Ubuntu Security Notice USN-7000-1 vom 2024-09-12
  https://ubuntu.com/security/notices/USN-7000-1
• Ubuntu Security Notice USN-7001-1 vom 2024-09-12
  https://ubuntu.com/security/notices/USN-7001-1
• SUSE Security Update SUSE-SU-2024:3216-1 vom 2024-09-12
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/GRFZVMTSYLAIIM3O4QORWKBZLMEVFR5R/
• Ubuntu Security Notice USN-7001-2 vom 2024-09-17
  https://ubuntu.com/security/notices/USN-7001-2
• Debian Security Advisory DSA-5770 vom 2024-09-18
  https://lists.debian.org/debian-security-announce/2024/msg00183.html
• OpenBSD 7.4 Errata vom 2024-09-17
  http://www.openbsd.org/errata74.html
• Ubuntu Security Notice USN-7000-2 vom 2024-09-17
  https://ubuntu.com/security/notices/USN-7000-2
• Red Hat Security Advisory RHSA-2024:6754 vom 2024-09-18
  https://access.redhat.com/errata/RHSA-2024:6754
• Debian Security Advisory DLA-3893 vom 2024-09-19
  https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html
• Oracle Linux Security Advisory ELSA-2024-6754 vom 2024-09-19
  https://linux.oracle.com/errata/ELSA-2024-6754.html
• Red Hat Security Advisory RHSA-2024:6989 vom 2024-09-24
  https://access.redhat.com/errata/RHSA-2024:6989
• Tenable Security Advisory TNS-2024-17 vom 2024-09-24
  https://de.tenable.com/security/tns-2024-17
• Oracle Linux Security Advisory ELSA-2024-6989 vom 2024-09-25
  https://linux.oracle.com/errata/ELSA-2024-6989.html
• Rocky Linux Security Advisory RLSA-2024:6754 vom 2024-09-30
  https://errata.build.resf.org/RLSA-2024:6754
• Red Hat Security Advisory RHSA-2024:7443 vom 2024-10-01
  https://access.redhat.com/errata/RHSA-2024:7443
• Red Hat Security Advisory RHSA-2024:7324 vom 2024-10-02
  https://access.redhat.com/errata/RHSA-2024:7324
• SUSE Security Update SUSE-SU-2024:3515-1 vom 2024-10-03
  https://lists.suse.com/pipermail/sle-security-updates/2024-October/019545.html
• Red Hat Security Advisory RHSA-2024:7726 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7726
• Red Hat Security Advisory RHSA-2024:7725 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7725
• Red Hat Security Advisory RHSA-2024:7724 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7724
• Red Hat Security Advisory RHSA-2024:7323 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7323
• SUSE Security Update SUSE-SU-2024:3538-1 vom 2024-10-07
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/67DVWJC3OZSFQYKJ3MMCJSQM4LKUJXH5/
• Red Hat Security Advisory RHSA-2024:7744 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7744
• Red Hat Security Advisory RHSA-2024:7599 vom 2024-10-09
  https://access.redhat.com/errata/RHSA-2024:7599
• SUSE Security Update SUSE-SU-2024:3554-1 vom 2024-10-09
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/NII5WWMANSN5NYNMNOK7LJ2P5FT7TW5X/
• Red Hat Security Advisory RHSA-2024:8113 vom 2024-10-15
  https://access.redhat.com/errata/RHSA-2024:8113
• Red Hat Security Advisory RHSA-2024:8315 vom 2024-10-23
  https://access.redhat.com/errata/RHSA-2024:8315
• Red Hat Security Advisory RHSA-2024:8314 vom 2024-10-23
  https://access.redhat.com/errata/RHSA-2024:8314
• Red Hat Security Advisory RHSA-2024:8317 vom 2024-10-23
  https://access.redhat.com/errata/RHSA-2024:8317
• Red Hat Security Advisory RHSA-2024:8318 vom 2024-10-23
  https://access.redhat.com/errata/RHSA-2024:8318
• IBM Security Bulletin
  https://www.ibm.com/support/pages/node/7174634
• Red Hat Security Advisory RHSA-2024:8859 vom 2024-11-05
  https://access.redhat.com/errata/RHSA-2024:8859
• Oracle Linux Security Advisory ELSA-2024-8859 vom 2024-11-06
  https://linux.oracle.com/errata/ELSA-2024-8859.html
• IBM Security Bulletin 7174912 vom 2024-11-06
  https://www.ibm.com/support/pages/node/7174912
• Red Hat Security Advisory RHSA-2024:9583 vom 2024-11-13
  https://access.redhat.com/errata/RHSA-2024:9583
• Red Hat Security Advisory RHSA-2024:9610 vom 2024-11-19
  https://access.redhat.com/errata/RHSA-2024:9610
• Oracle Linux Security Advisory ELSA-2024-9541 vom 2024-11-19
  https://linux.oracle.com/errata/ELSA-2024-9541.html
• Red Hat Security Advisory RHSA-2024:10135 vom 2024-11-21
  https://access.redhat.com/errata/RHSA-2024:10135
• Amazon Linux Security Advisory ALAS-2024-2710 vom 2024-12-20
  https://alas.aws.amazon.com/AL2/ALAS-2024-2710.html
• Juniper Security Advisory JSA92874 vom 2024-01-09
  https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R2-release
• Amazon Linux Security Advisory ALAS-2025-1953 vom 2025-01-10
  https://alas.aws.amazon.com/ALAS-2025-1953.html
• IBM Security Bulletin 7181897 vom 2025-01-29
  https://www.ibm.com/support/pages/node/7181897
• Brocade Security Advisory BSA-2025-2889 vom 2025-02-13
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25416
• Dell Security Advisory DSA-2025-082 vom 2025-02-27
  https://www.dell.com/support/kbdoc/de-de/000289682/dsa-2025-082-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
• Red Hat Security Advisory RHSA-2025:3453 vom 2025-04-02
  https://access.redhat.com/errata/RHSA-2025:3453
• Dell Security Advisory DSA-2025-146 vom 2025-04-08
  https://www.dell.com/support/kbdoc/en-us/000299628/dsa-2025-146-security-update-for-dell-idrac9-vulnerabilities
• Juniper Security Bulletin
  https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R2-release?language=en_US
• XEROX Security Advisory XRX25-012 vom 2025-06-02
  https://security.business.xerox.com/wp-content/uploads/2025/06/Xerox-Security-Bulletin-XRX25-012-for-Xerox-FreeFlow-Print-Server-v9.pdf
• SUSE Security Update SUSE-SU-2025:20311-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021027.html
• SUSE Security Update SUSE-SU-2025:20207-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021128.html
• SUSE Security Update SUSE-SU-2025:20045-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021308.html
• Siemens Security Advisory SSA-082556 vom 2025-06-10
  https://cert-portal.siemens.com/productcert/html/ssa-082556.html
• NetApp Security Advisory NTAP-20241018-0004 vom 2025-06-27
  https://security.netapp.com/advisory/NTAP-20241018-0004
• IBM Security Bulletin 7240946 vom 2025-07-29
  https://www.ibm.com/support/pages/node/7240946
• Security Update for Dell PowerProtect Data Domain
  https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
• Dell Security Advisory DSA-2025-339 vom 2025-09-01
  https://www.dell.com/support/kbdoc/de-de/000362542/dsa-2025-339-security-update-for-dell-avamar-data-store-gen5a-multiple-third-party-component-vulnerabilities
• Hitachi Cybersecurity Advisory vom 2025-09-09
  https://publisher.hitachienergy.com/preview?DocumentID=8DBD000220&LanguageCode=en&DocumentPartId=&Action=launch
• Dell Security Update vom 2025-10-02
  https://www.dell.com/support/kbdoc/000376224
• Dell Security Advisory DSA-2025-166 vom 2025-10-14
  https://www.dell.com/support/kbdoc/de-de/000363693/dsa-2025-166-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities