An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:11200 advisory.

    Expat is a C library for parsing XML documents.

    Security Fix(es):

    * libexpat: expat: DoS via XML_ResumeParser (CVE-2024-50602)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4035-1 advisory.

    - CVE-2024-50602: Fixed a denial of service via XML_ResumeParser (bsc#1232579).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7145-1 advisory.

    It was discovered that Expat did not properly handle its internal state when attempting to resume an     unstarted parser. An attacker could use this issue to cause a denial of service (application crash).

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of python3 installed on the remote host is prior to 3.12.8 / 3.9.21. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-339-01 advisory.

    New python3 packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the python3 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9541 advisory.

    - Fix CVE-2024-50602
    - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9502 advisory.

    * libexpat: expat: DoS via XML_ResumeParser (CVE-2024-50602)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fa21fd6c77 advisory.

    Update to 2.6.4.

    ----

    Backport fix for CVE-2024-50602.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-cdde5c873d advisory.

    Update to 2.6.4.

    ----

    Backport fix for CVE-2024-50602.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3997-1 advisory.

    - CVE-2024-50602: Fixed a denial of service in the vendored libexpat's XML_ResumeParser function     (bsc#1232590).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7427eaacd8 advisory.

    Backport fix for CVE-2024-50602.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9502 advisory.

    - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314]
    - Fix CVE-2024-50602

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:9502 advisory.

    * libexpat: expat: DoS via XML_ResumeParser (CVE-2024-50602)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9502 advisory.

    Expat is a C library for parsing XML documents.

    Security Fix(es):

    * libexpat: expat: DoS via XML_ResumeParser (CVE-2024-50602)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the expat-2.5.0-4.el9 build changelog.

  - An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function     because XML_StopParser can stop/suspend an unstarted parser. (CVE-2024-50602)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:3964-1 advisory.

    Security issue fixed:

    - CVE-2024-50602: Fixed a denial of service in the vendored libexpat's XML_ResumeParser function     (bsc#1232590).

    Non-security issues fixed:

    - rebuilt for python 3.11 (bsc#1228252).
    - add repack script, do not include packaging/ dir in sources
    - Reduce complexity by not rewriting subpackages at all.
    - Appease factory-auto bot about package src name.
    - Add additional patches fixing the situation with Python 3.10       compatibility.
    - Split out the TW python3 flavors into multibuild using the       python_subpackage_only mechanism: Multiple python3 flavors       sequentially require too much space and time in one build.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:3968-1 advisory.

    - CVE-2024-50602: Fixed a denial of service via XML_ResumeParser (bsc#1232579).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of expat installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50602 advisory.

  - An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function     because XML_StopParser can stop/suspend an unstarted parser. (CVE-2024-50602)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of expat installed on the remote host is prior to 2.6.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-312-01 advisory.

    New expat packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the expat security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
213150	RHEL 9 : expat (RHSA-2024:11200)	Nessus	Red Hat Local Security Checks	medium
212546	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : expat (SUSE-SU-2024:4035-1)	Nessus	SuSE Local Security Checks	medium
212213	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Expat vulnerability (USN-7145-1)	Nessus	Ubuntu Local Security Checks	medium
212062	Slackware Linux 15.0 / current python3 Vulnerability (SSA:2024-339-01)	Nessus	Slackware Local Security Checks	medium
211611	Oracle Linux 9 : expat (ELSA-2024-9541)	Nessus	Oracle Linux Local Security Checks	medium
211597	RockyLinux 8 : expat (RLSA-2024:9502)	Nessus	Rocky Linux Local Security Checks	medium
211526	Fedora 41 : mingw-expat (2024-fa21fd6c77)	Nessus	Fedora Local Security Checks	medium
211523	Fedora 40 : mingw-expat (2024-cdde5c873d)	Nessus	Fedora Local Security Checks	medium
211483	SUSE SLES15 / openSUSE 15 Security Update : python3-wxPython (SUSE-SU-2024:3997-1)	Nessus	SuSE Local Security Checks	medium
210935	Fedora 39 : mingw-expat (2024-7427eaacd8)	Nessus	Fedora Local Security Checks	medium
210909	Oracle Linux 8 : expat (ELSA-2024-9502)	Nessus	Oracle Linux Local Security Checks	medium
210891	AlmaLinux 8 : expat (ALSA-2024:9502)	Nessus	Alma Linux Local Security Checks	medium
210886	RHEL 8 : expat (RHSA-2024:9502)	Nessus	Red Hat Local Security Checks	medium
210768	CentOS 9 : expat-2.5.0-4.el9	Nessus	CentOS Local Security Checks	medium
210764	openSUSE 15 Security Update : python-wxPython (SUSE-SU-2024:3964-1)	Nessus	SuSE Local Security Checks	medium
210761	SUSE SLES12 Security Update : expat (SUSE-SU-2024:3968-1)	Nessus	SuSE Local Security Checks	medium
210723	CBL Mariner 2.0 Security Update: expat (CVE-2024-50602)	Nessus	MarinerOS Local Security Checks	medium
210544	Slackware Linux 15.0 / current expat Vulnerability (SSA:2024-312-01)	Nessus	Slackware Local Security Checks	medium

Detections

Analytics

CVE-2024-50602

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium