Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-52426HistoryFeb 04, 2024 - 8:15 p.m.
CVE-2023-52426
2024-02-0420:15:46
Alpine Linux Development Team
security.alpinelinux.org
12
libexpat
xml entity expansion
cve-2023-52426
unix
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
5.9
Confidence
High
EPSS
0.001
Percentile
20.1%
libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | expat | < 2.6.0-r0 | UNKNOWN |
| Alpine | 3.16-main | noarch | expat | < 2.6.0-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | expat | < 2.6.0-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | expat | < 2.6.0-r0 | UNKNOWN |
| Alpine | 3.19-main | noarch | expat | < 2.6.0-r0 | UNKNOWN |
| Alpine | 3.20-main | noarch | expat | < 2.6.0-r0 | UNKNOWN |
Related
osv
osv
CVE-2023-52426
2024-02-04 20:15:46
expat-2.6.0-1.1 on GA media
2024-06-15 00:00:00
redos
redos
ROS-20240603-03
2024-06-03 00:00:00
ROS-20240805-08
2024-08-05 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2024-1982)
2024-07-19 00:00:00
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2024-1868)
2024-07-01 00:00:00
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2024-1798)
2024-06-03 00:00:00
debiancve
debiancve
CVE-2023-52426
2024-02-04 20:15:46
f5
f5
K000140250: Expat vulnerability CVE-2023-52426
2024-07-03 00:00:00
nessus
nessus
EulerOS 2.0 SP12 : expat (EulerOS-SA-2024-1868)
2024-06-28 00:00:00
EulerOS Virtualization 2.11.0 : expat (EulerOS-SA-2024-1725)
2024-05-29 00:00:00
EulerOS Virtualization 2.11.1 : expat (EulerOS-SA-2024-1714)
2024-05-29 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-52426 affecting package expat for versions less than 2.6.2-2
2024-04-09 20:48:36
CVE-2023-52426 affecting package expat for versions less than 2.6.2-1
2024-06-21 09:32:44
redhatcve
redhatcve
CVE-2023-52426
2024-02-06 00:00:03
cvelist
cvelist
CVE-2023-52426
2024-02-04 00:00:00
ubuntucve
ubuntucve
CVE-2023-52426
2024-02-04 00:00:00
prion
prion
Design/Logic Flaw
2024-02-04 20:15:00
veracode
veracode
XML Entity Expansion
2024-02-11 08:46:39
vulnrichment
vulnrichment
CVE-2023-52426
2024-02-04 00:00:00
cve
cve
CVE-2023-52426
2024-02-04 20:15:46
nvd
nvd
CVE-2023-52426
2024-02-04 20:15:46
fedora
fedora
[SECURITY] Fedora 39 Update: mingw-expat-2.6.0-1.fc39
2024-02-25 01:26:24
[SECURITY] Fedora 38 Update: mingw-expat-2.6.0-1.fc38
2024-02-25 01:26:32
slackware
slackware
[slackware-security] expat
2024-02-07 20:13:19
ibm
ibm
Security Bulletin: A security vulnerability has been disclosed in Expat, which is installed as part of IBM Tivoli Network Manager (CVE-2023-52425).
2024-03-21 13:05:33
aix
aix
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0581
2024-03-20 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0216
2024-02-29 00:00:00
ics
ics
Siemens SINEC NMS
2024-08-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
5.9
Confidence
High
EPSS
0.001
Percentile
20.1%
Related for ALPINE:CVE-2023-52426