VulnerableCode Package Details - pkg:deb/debian/expat@2.5.0-1%2Bdeb12u1

Search for packages

Vulnerability	Summary	Fixed by
VCID-dgs1-y858-hfhp Aliases: CVE-2024-50602	An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.	2.5.0-1+deb12u2 Affected by 0 other vulnerabilities.
VCID-evqy-f4at-7qed Aliases: CVE-2024-28757	libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).	2.5.0-1+deb12u2 Affected by 0 other vulnerabilities.
VCID-phjj-j9b4-w7ft Aliases: CVE-2023-52425	libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.	2.5.0-1+deb12u2 Affected by 0 other vulnerabilities.
VCID-xvec-3w4v-9kgt Aliases: CVE-2024-8176	A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.	2.5.0-1+deb12u2 Affected by 0 other vulnerabilities.
VCID-zemq-5gq1-bbda Aliases: CVE-2023-52426	libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.	2.5.0-1+deb12u2 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-dgs1-y858-hfhp
Aliases:
CVE-2024-50602

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.