Attestkeep
Dil: Türkçe
Kayıt ol

Zafiyetler / CVE-2024-45491

kritik

CVE-2024-45491

libexpat: Integer Overflow or Wraparound

Yayın Değişiklik CWE 190
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.

Kaynağa göre önem derecesi

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Julia9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Azure Linux, CBL-Mariner, Julia, Photon OS. Daha düşük diyenler: Bottlerocket (yüksek), Red Hat (orta), AlmaLinux (orta), Oracle (orta), Rocky Linux (orta), Ubuntu (orta).

Açıklama

An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).

Etkilenen paketler ve düzeltilmiş sürümler

KaynakPaketDüzeltildiği sürüm
Azure Linux 3.0expat0:2.6.3-1.azl3
CBL-Mariner 2.0expat0:2.6.3-1.cm2
julia::Julia Ecosystem Security AdvisoriesExpat_jll2.6.4+0
Photon OS 3.0expat2.2.9-12.ph3
Photon OS 4.0expat, expat-devel, expat-docs ve 1 tane daha2.4.9-3.ph4
Photon OS 5.0expat, expat-devel, expat-docs ve 3 tane daha2.6.0-3.ph5 ve 1 tane daha
alma 8expat, expat-devel, xmlrpc-c ve 4 tane daha2.2.5-15.el8_10 ve 1 tane daha
alma 9expat, expat-devel2.5.0-2.el9_4.1
alpine 3.17expat2.6.3-r0
alpine 3.18expat2.6.3-r0
alpine 3.19expat2.6.3-r0
alpine 3.20expat, qt5-qtwebengine2.6.3-r0 ve 1 tane daha
60 kaynaktaki 141 kaydın hepsini göster
KaynakPaketDüzeltildiği sürüm
Azure Linux 3.0expat0:2.6.3-1.azl3
CBL-Mariner 2.0expat0:2.6.3-1.cm2
julia::Julia Ecosystem Security AdvisoriesExpat_jll2.6.4+0
Photon OS 3.0expat2.2.9-12.ph3
Photon OS 4.0expat2.4.9-3.ph4
Photon OS 4.0expat-devel2.4.9-3.ph4
Photon OS 4.0expat-docs2.4.9-3.ph4
Photon OS 4.0expat-libs2.4.9-3.ph4
Photon OS 5.0expat2.6.0-3.ph5
Photon OS 5.0expat-devel2.6.0-3.ph5
Photon OS 5.0expat-docs2.6.0-3.ph5
Photon OS 5.0expat-libs2.6.0-3.ph5
Photon OS 5.0mozjs102.12.0-6.ph5
Photon OS 5.0mozjs-devel102.12.0-6.ph5
alma 8expat2.2.5-15.el8_10
alma 8expat-devel2.2.5-15.el8_10
alma 8xmlrpc-c1.51.0-10.el8_10
alma 8xmlrpc-c-c++1.51.0-10.el8_10
alma 8xmlrpc-c-client1.51.0-10.el8_10
alma 8xmlrpc-c-client++1.51.0-10.el8_10
alma 8xmlrpc-c-devel1.51.0-10.el8_10
alma 9expat2.5.0-2.el9_4.1
alma 9expat-devel2.5.0-2.el9_4.1
alpine 3.17expat2.6.3-r0
alpine 3.18expat2.6.3-r0
alpine 3.19expat2.6.3-r0
alpine 3.20expat2.6.3-r0
alpine 3.20qt5-qtwebengine5.15.16-r12
alpine 3.21expat2.6.3-r0
alpine 3.21qt5-qtwebengine5.15.17-r3
alpine 3.21qt6-qtwebengine6.7.2-r6
alpine 3.22expat2.6.3-r0
alpine 3.22qt5-qtwebengine5.15.17-r3
alpine 3.22qt6-qtwebengine6.7.2-r6
alpine 3.23expat2.6.3-r0
alpine 3.23qt5-qtwebengine5.15.17-r3
alpine 3.23qt6-qtwebengine6.7.2-r6
alpine 3.24expat2.6.3-r0
alpine 3.24qt6-qtwebengine6.7.2-r6
alpine edgeexpat2.6.3-r0
alpine edgeqt6-qtwebengine6.7.2-r6
bottlerocketlibexpat2.4.1-8d443e7c
chainguardexpat2.6.3-r0
debian 11expat2.2.10-2+deb11u6
debian 11libxmltokdüzeltme belirtilmemiş
debian 12expat2.5.0-1+deb12u1
debian 12libxmltokdüzeltme belirtilmemiş
debian 13expat2.6.2-2
debian 14expat2.6.2-2
echoexpat2.5.0-1+deb12u1
echolibxmltokdüzeltme belirtilmemiş
Oracle Linux 8expat2.2.5-15.0.1.el8_10
Oracle Linux 8expat-devel2.2.5-15.0.1.el8_10
Oracle Linux 8xmlrpc-c1.51.0-10.el8_10
Oracle Linux 8xmlrpc-c-c++1.51.0-10.el8_10
Oracle Linux 8xmlrpc-c-client1.51.0-10.el8_10
Oracle Linux 8xmlrpc-c-client++1.51.0-10.el8_10
Oracle Linux 8xmlrpc-c-devel1.51.0-10.el8_10
Oracle Linux 9expat2.5.0-2.el9_4.1
Oracle Linux 9expat-devel2.5.0-2.el9_4.1
rapidfort alma 8firefoxdüzeltme belirtilmemiş
rapidfort alma 8thunderbirddüzeltme belirtilmemiş
rapidfort alma 9firefoxdüzeltme belirtilmemiş
rapidfort alma 9firefox-x11düzeltme belirtilmemiş
rapidfort alma 9thunderbirddüzeltme belirtilmemiş
rapidfort alpine 3.20expat2.6.3-r0
rapidfort alpine 3.20qt6-qtwebengine6.7.2-r6
rapidfort alpine 3.21expat2.6.3-r0
rapidfort alpine 3.21qt5-qtwebengine5.15.17-r3
rapidfort alpine 3.21qt6-qtwebengine6.7.2-r6
rapidfort alpine 3.22expat2.6.3-r0
rapidfort alpine 3.22qt5-qtwebengine5.15.17-r3
rapidfort alpine 3.22qt6-qtwebengine6.7.2-r6
rapidfort alpine 3.23expat2.6.3-r0
rapidfort alpine 3.23qt5-qtwebengine5.15.17-r3
rapidfort alpine 3.23qt6-qtwebengine6.7.2-r6
rapidfort alpine 3.24expat2.6.3-r0
rapidfort alpine 3.24qt5-qtwebengine5.15.17-r3
rapidfort alpine 3.24qt6-qtwebengine6.7.2-r6
rapidfort debian 12libxmltok0:1.2-4.1
rapidfort debian 13libxmltok0:1.2-4.1
rapidfort Oracle Linux 9expat0:2.5.0-2.el9_4.1
rapidfort Oracle Linux 9expat-devel0:2.5.0-2.el9_4.1
rapidfort Oracle Linux 9firefoxdüzeltme belirtilmemiş
rapidfort Oracle Linux 9firefox-x11düzeltme belirtilmemiş
rapidfort Oracle Linux 9thunderbirddüzeltme belirtilmemiş
rapidfort rocky 8firefoxdüzeltme belirtilmemiş
rapidfort rocky 8thunderbirddüzeltme belirtilmemiş
rapidfort rocky 9firefoxdüzeltme belirtilmemiş
rapidfort rocky 9firefox-x11düzeltme belirtilmemiş
rapidfort rocky 9thunderbirddüzeltme belirtilmemiş
rapidfort ubuntu 20.04expat0:2.4.7-1ubuntu0.4, 0:2.6.1-2ubuntu0.1
rapidfort ubuntu 20.04matanzadüzeltme belirtilmemiş
rapidfort ubuntu 20.04rf-expat0:2.4.7-1ubuntu0.4, 0:2.6.1-2ubuntu0.1
rapidfort ubuntu 22.04expat0:2.4.7-1ubuntu0.4, 0:2.6.1-2ubuntu0.1
rapidfort ubuntu 22.04matanzadüzeltme belirtilmemiş
rapidfort ubuntu 22.04rf-expat0:2.4.7-1ubuntu0.4, 0:2.6.1-2ubuntu0.1
rapidfort ubuntu 24.04expat0:2.4.7-1ubuntu0.4, 0:2.6.1-2ubuntu0.1
rapidfort ubuntu 24.04matanzadüzeltme belirtilmemiş
rapidfort ubuntu 24.04rf-expat0:2.4.7-1ubuntu0.4, 0:2.6.1-2ubuntu0.1
Red Hatcompat-expat1düzeltme belirtilmemiş
Red Hatexpatdüzeltme belirtilmemiş
Red Hatexpat-develdüzeltme belirtilmemiş
Red Hatexpat-staticdüzeltme belirtilmemiş
Red Hatfirefoxdüzeltme belirtilmemiş
Red Hatfirefox-x11düzeltme belirtilmemiş
Red Hatmingw-expatdüzeltme belirtilmemiş
Red Hatmingw32-expatdüzeltme belirtilmemiş
Red Hatmingw64-expatdüzeltme belirtilmemiş
Red Hatopenshift/ose-rhel-coreos-9düzeltme belirtilmemiş
Red Hatthunderbirddüzeltme belirtilmemiş
rocky 8expat2.2.5-15.el8_10
rocky 8expat-devel2.2.5-15.el8_10
rocky 8xmlrpc-c1.51.0-10.el8_10
rocky 8xmlrpc-c-client1.51.0-10.el8_10
rocky 9expat2.5.0-2.el9_4.1
rocky 9expat-devel2.5.0-2.el9_4.1
root.io debian 11rootio-expat2.2.10-2+deb11u6
root.io debian 12rootio-expat2.5.0-1+deb12u1
root.io debian 13rootio-expat2.6.2-2
seal debianexpat2.5.0-1+deb12u1+sp999, 2.5.0-1+deb12u2+sp999
seal debianseal-expat2.5.0-1+deb12u1+sp999, 2.5.0-1+deb12u2+sp999
seal Red Hat 7expat2.1.0-15.el7_9+sp999
seal Red Hat 7seal-expat2.1.0-15.el7_9+sp999
seal Red Hat 8expat2.2.5-16.el8_10+sp999, 2.2.5-4.0.1.el8_5.3+sp999
seal Red Hat 8seal-expat2.2.5-16.el8_10+sp999, 2.2.5-4.0.1.el8_5.3+sp999
ubuntu 14.04-ESMexpat2.1.0-4ubuntu1.4+esm9
ubuntu 16.04-ESMexpat2.1.0-7ubuntu0.16.04.5+esm9
ubuntu 16.04-ESMlibxmltok1.2-3ubuntu0.16.04.1~esm4
ubuntu 18.04-ESMexpat2.2.5-3ubuntu0.9+esm1
ubuntu 18.04-ESMlibxmltok1.2-4ubuntu0.18.04.1~esm3
ubuntu 20.04expat2.2.9-1ubuntu0.7
ubuntu 20.04-ESMexpat2.2.9-1ubuntu0.7
ubuntu 20.04-ESMlibxmltok1.2-4ubuntu0.20.04.1~esm3
ubuntu 22.04expat2.4.7-1ubuntu0.4
ubuntu 22.04libxmltokdüzeltme belirtilmemiş
ubuntu 24.04expat2.6.1-2ubuntu0.1
ubuntu 24.04libxmltokdüzeltme belirtilmemiş
ubuntu 24.10libxmltok1.2-4.1ubuntu3
ubuntu 25.04libxmltok1.2-4.1ubuntu3
wolfiexpat2.6.3-r0

Referanslar

31 referansın hepsi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.