A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.

oracle CPUApr2025: Oracle Database Server

vendor_unpatched cve-2024-8176: Unpatched CVEs for Debian Linux (cve-2024-8176)

An update of the expat package has been released.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:1201-1 advisory.

    - CVE-2024-8176: Fixed denial of service from chaining a large number of entities caused       by stack overflow by resolving use of recursion (bsc#1239618)

    Other fixes:
    - version update to 2.7.1 (jsc#PED-12500)          Bug fixes:
           #980 #989  Restore event pointer behavior from Expat 2.6.4                         (that the fix to CVE-2024-8176 changed in 2.7.0);
                        affected API functions are:
                        - XML_GetCurrentByteCount
                        - XML_GetCurrentByteIndex
                        - XML_GetCurrentColumnNumber
                        - XML_GetCurrentLineNumber
                        - XML_GetInputContext

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of expat installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8176 advisory.

  - A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity     expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat     can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could     lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the     environment and library usage. (CVE-2024-8176)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:1186-1 advisory.

    - CVE-2024-8176: Fixed denial of service from chaining a large number of entities caused       by stack overflow by resolving use of recursion (bsc#1239618)

    Other fixes:
    - version update to 2.7.1 (jsc#PED-12500)          Bug fixes:
           #980 #989  Restore event pointer behavior from Expat 2.6.4                         (that the fix to CVE-2024-8176 changed in 2.7.0);
                        affected API functions are:
                        - XML_GetCurrentByteCount
                        - XML_GetCurrentByteIndex
                        - XML_GetCurrentColumnNumber
                        - XML_GetCurrentLineNumber
                        - XML_GetInputContext

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8f71ad3b-14f5-11f0-87ba-002590c1f29c advisory.

    secalert@redhat.com reports:
    A stack overflow vulnerability exists in the libexpat library due               to the way it handles recursive entity expansion in XML documents.
              When parsing an XML document with deeply nested entity references,               libexpat can be forced to recurse indefinitely, exhausting the stack               space and causing a crash.  This issue could lead to denial of               service (DoS) or, in some cases, exploitable memory corruption,               depending on the environment and library usage.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7424-1 advisory.

    It was discovered that Expat could crash due to stack overflow when

    processing XML documents with deeply nested entity references. If a user

    or automated system were tricked into processing specially crafted XML

    input, an attacker could use this issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3531 advisory.

    Expat is a C library for parsing XML documents.

    Security Fix(es):

    * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:3531 advisory.

    * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3531 advisory.

    - Improve fix for CVE-2024-8176
    - Fix CVE-2024-8176

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of expat installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8176 advisory.

  - A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity     expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat     can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could     lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the     environment and library usage. (CVE-2024-8176)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d487e15b69 advisory.

    Rebase to 2.7.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of expat installed on the remote host is prior to 2.7.0. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-073-01 advisory.

    New expat packages are available for Slackware 15.0 and -current to fix a security issue.

Tenable has extracted the preceding description block directly from the expat security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-20e86a3c86 advisory.

    Rebase to 2.7.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
234442	Photon OS 5.0: Expat PHSA-2025-5.0-0502	Nessus	PhotonOS Local Security Checks	high
234315	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : expat (SUSE-SU-2025:1201-1)	Nessus	SuSE Local Security Checks	high
234252	Azure Linux 3.0 Security Update: expat (CVE-2024-8176)	Nessus	Azure Linux Local Security Checks	high
234119	SUSE SLES15 Security Update : expat (SUSE-SU-2025:1186-1)	Nessus	SuSE Local Security Checks	high
234077	FreeBSD : expat: improper restriction of xml entity expansion depth (8f71ad3b-14f5-11f0-87ba-002590c1f29c)	Nessus	FreeBSD Local Security Checks	high
234028	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : Expat vulnerability (USN-7424-1)	Nessus	Ubuntu Local Security Checks	high
233826	RHEL 9 : expat (RHSA-2025:3531)	Nessus	Red Hat Local Security Checks	high
233825	AlmaLinux 9 : expat (ALSA-2025:3531)	Nessus	Alma Linux Local Security Checks	high
233788	Oracle Linux 9 : expat (ELSA-2025-3531)	Nessus	Oracle Linux Local Security Checks	high
233405	CBL Mariner 2.0 Security Update: expat (CVE-2024-8176)	Nessus	MarinerOS Local Security Checks	high
233354	Fedora 40 : expat (2025-d487e15b69)	Nessus	Fedora Local Security Checks	high
232940	Slackware Linux 15.0 / current expat Vulnerability (SSA:2025-073-01)	Nessus	Slackware Local Security Checks	high
232828	Fedora 41 : expat (2025-20e86a3c86)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2024-8176

high

Tenable Plugins

Coming Soon

high

high

high

high

high

high

high

high

high

high

high

high

high