Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2024-45492
HistoryAug 30, 2024 - 3:15 a.m.

CVE-2024-45492

2024-08-3003:15:03
CWE-190
[email protected]
web.nvd.nist.gov
10
libexpat integer overflow 32-bit

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

39.7%

JSON

An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).

Affected configurations

Nvd
Node
libexpat_projectlibexpatRange<2.6.3
VendorProductVersionCPE
libexpat_projectlibexpat*cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*

Related

vulnrichment 1
nessus 18
osv 9
cve 1
alpinelinux 1
debiancve 1
redhatcve 1
cbl_mariner 1
cvelist 1
cloudlinux 1
redos 1
openvas 13
slackware 2
fedora 4
oraclelinux 1
redhat 1
mageia 1
photon 3
vulnrichment
vulnrichment
CVE-2024-45492
2024-08-30 00:00:00
nessus
nessus
CBL Mariner 2.0 Security Update: expat (CVE-2024-45492)
2024-09-14 00:00:00
Fedora 40 : mingw-expat (2024-c7b547bec5)
2024-09-14 00:00:00
Tenable Nessus Agent < 10.7.3 and earlier Multiple Vulnerabilities (TNS-2024-14)
2024-09-12 00:00:00
osv
osv
CVE-2024-45492
2024-08-30 03:15:03
expat vulnerabilities
2024-09-12 10:01:43
expat-2.6.3-1.1 on GA media
2024-09-06 00:00:00
cve
cve
CVE-2024-45492
2024-08-30 03:15:03
alpinelinux
alpinelinux
CVE-2024-45492
2024-08-30 03:15:03
debiancve
debiancve
CVE-2024-45492
2024-08-30 03:15:03
redhatcve
redhatcve
CVE-2024-45492
2024-09-05 07:15:09
cbl_mariner
cbl_mariner
CVE-2024-45492 affecting package expat for versions less than 2.6.3-1
2024-09-13 18:09:05
cvelist
cvelist
CVE-2024-45492
2024-08-30 00:00:00
cloudlinux
cloudlinux
expat: Fix of 2 CVEs
2024-09-10 18:46:09
redos
redos
ROS-20240829-10
2024-08-29 00:00:00
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-c7b547bec5)
2024-09-16 00:00:00
Slackware: Security Advisory (SSA:2024-248-01)
2024-09-05 00:00:00
Ubuntu: Security Advisory (USN-7000-2)
2024-09-18 00:00:00
slackware
slackware
[slackware-security] expat
2024-09-04 23:40:07
[slackware-security] python3
2024-09-09 01:06:11
fedora
fedora
[SECURITY] Fedora 41 Update: mingw-expat-2.6.3-1.fc41
2024-09-13 21:02:44
[SECURITY] Fedora 40 Update: expat-2.6.3-1.fc40
2024-09-10 02:10:36
[SECURITY] Fedora 39 Update: mingw-expat-2.6.3-1.fc39
2024-09-14 01:26:36
oraclelinux
oraclelinux
expat security update
2024-09-18 00:00:00
redhat
redhat
(RHSA-2024:6754) Moderate: expat security update
2024-09-18 11:08:23
mageia
mageia
Updated expat packages fix security vulnerabilities
2024-09-11 23:42:44
photon
photon
Critical Photon OS Security Update - PHSA-2024-3.0-0796
2024-09-17 00:00:00
Critical Photon OS Security Update - PHSA-2024-4.0-0682
2024-09-04 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0364
2024-09-05 00:00:00

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

39.7%

JSON
Related for NVD:CVE-2024-45492
vulnrichment1nessus18osv9cve1alpinelinux1debiancve1redhatcve1cbl_mariner1cvelist1cloudlinux1redos1openvas13slackware2fedora4oraclelinux1redhat1mageia1photon3