Lucene search
HistoryAug 30, 2024 - 3:15 a.m.
CVE-2024-45490
issue discovered
libexpat
negative length
xml_parsebuffer
xml
vulnerability
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.7%
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.
Affected configurations
Node
libexpat_projectlibexpatRange<2.6.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| libexpat_project | libexpat | * | cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:* |
Related
alpinelinux
alpinelinux
CVE-2024-45490
2024-08-30 03:15:03
redhatcve
redhatcve
CVE-2024-45490
2024-08-30 13:12:27
cvelist
cvelist
CVE-2024-45490
2024-08-30 00:00:00
redos
redos
ROS-20240910-03
2024-09-10 00:00:00
nessus
nessus
CBL Mariner 2.0 Security Update: expat (CVE-2024-45490)
2024-09-14 00:00:00
Ubuntu 24.04 LTS : xmltok library vulnerabilities (USN-7001-2)
2024-09-17 00:00:00
osv
osv
CVE-2024-45490
2024-08-30 03:15:03
libxmltok vulnerabilities
2024-09-17 11:54:23
libxmltok vulnerabilities
2024-09-12 10:20:05
vulnrichment
vulnrichment
CVE-2024-45490
2024-08-30 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-45490 affecting package expat for versions less than 2.6.3-1
2024-09-13 18:09:05
cve
cve
CVE-2024-45490
2024-08-30 03:15:03
debiancve
debiancve
CVE-2024-45490
2024-08-30 03:15:03
openvas
openvas
Ubuntu: Security Advisory (USN-7001-1)
2024-09-12 00:00:00
Ubuntu: Security Advisory (USN-7001-2)
2024-09-18 00:00:00
Fedora: Security Advisory (FEDORA-2024-e86a48cd72)
2024-09-16 00:00:00
mageia
mageia
Updated expat packages fix security vulnerabilities
2024-09-11 23:42:44
fedora
fedora
[SECURITY] Fedora 40 Update: mingw-expat-2.6.3-1.fc40
2024-09-14 02:01:22
[SECURITY] Fedora 40 Update: expat-2.6.3-1.fc40
2024-09-10 02:10:36
[SECURITY] Fedora 39 Update: mingw-expat-2.6.3-1.fc39
2024-09-14 01:26:36
oraclelinux
oraclelinux
expat security update
2024-09-18 00:00:00
redhat
redhat
(RHSA-2024:6754) Moderate: expat security update
2024-09-18 11:08:23
slackware
slackware
[slackware-security] expat
2024-09-04 23:40:07
[slackware-security] python3
2024-09-09 01:06:11
photon
photon
Critical Photon OS Security Update - PHSA-2024-3.0-0796
2024-09-17 00:00:00
Critical Photon OS Security Update - PHSA-2024-4.0-0682
2024-09-04 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0364
2024-09-05 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.7%
Related for NVD:CVE-2024-45490