The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1530 advisory.

    Expat is a C library for parsing XML documents.

    Security Fix(es):

    * expat: parsing large tokens can trigger a denial of service (CVE-2023-52425)

    * expat: XML Entity Expansion (CVE-2024-28757)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2575 advisory.

    Expat is a C library for parsing XML documents.

    Security Fix(es):

    * expat: parsing large tokens can trigger a denial of service (CVE-2023-52425)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:1698-1 advisory.

  - libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are     required in the case of a large token for which multiple buffer fills are needed. (CVE-2023-52425)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLED_SAP12 / SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1667-1 advisory.

  - A use-after-free exists in Python through 3.9 via heappushpop in heapq. (CVE-2022-48560)

  - The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special     character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some     applications, an attacker can bypass a protection mechanism in which application access is granted only     after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be     used for signup). This occurs in email/_parseaddr.py in recent versions of Python. (CVE-2023-27043)

  - libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are     required in the case of a large token for which multiple buffer fills are needed. (CVE-2023-52425)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3926 advisory.

    Expat is a C library for parsing XML documents.

    Security Fix(es):

    * expat: parsing large tokens can trigger a denial of service (CVE-2023-52425)

    * expat: XML Entity Expansion (CVE-2024-28757)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3893 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3893-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     September 19, 2024                            https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : expat     Version        : 2.2.10-2+deb11u6     CVE ID         : CVE-2023-52425 CVE-2024-45490 CVE-2024-45491 CVE-2024-45492     Debian Bug     : 1063238 1080149 1080150 1080152

    Multiple vulnerabilities were found in expat, an XML parsing C library,     which could lead to Denial of Service, memory corruption or arbitrary     code execution.

    CVE-2023-52425

        Snild Dolkow discovered that when parsing a large token that         requires multiple buffer fills to complete, expat has to re-parse         the token from start multiple times, which could lead to Denial of         Service via resource exhaustion.

    CVE-2024-45490

        TaiYou discovered that xmlparse.c does not reject a negative length         for XML_ParseBuffer(), which may cause memory corruption or code         execution.

    CVE-2024-45491

        TaiYou discovered that xmlparse.c has an integer overflow for         `nDefaultAtts` on 32-bit platforms, which may cause denial of         service or code execution.

    CVE-2024-45492

        TaiYou discovered that xmlparse.c has an integer overflow for         `m_groupSize` on 32-bit platforms, which may cause denial of service         or code execution.

    For Debian 11 bullseye, these problems have been fixed in version     2.2.10-2+deb11u6.

    We recommend that you upgrade your expat packages.

    For the detailed security status of expat please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/expat

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1657-1 advisory.

  - libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are     required in the case of a large token for which multiple buffer fills are needed. (CVE-2023-52425)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:1615 advisory.

  - libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are     required in the case of a large token for which multiple buffer fills are needed. (CVE-2023-52425)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1129-1 advisory.

  - libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are     required in the case of a large token for which multiple buffer fills are needed. (CVE-2023-52425)

  - libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external     parsers (created via XML_ExternalEntityParserCreate). (CVE-2024-28757)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
192582	RHEL 9 : expat (RHSA-2024:1530)	Nessus	Red Hat Local Security Checks	3/26/2024	11/8/2024	high
194833	RHEL 8 : expat (RHSA-2024:2575)	Nessus	Red Hat Local Security Checks	4/30/2024	11/7/2024	high
197539	openSUSE 15 Security Update : python310 (SUSE-SU-2024:1698-1)	Nessus	SuSE Local Security Checks	5/21/2024	5/21/2024	high
197289	SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2024:1667-1)	Nessus	SuSE Local Security Checks	5/17/2024	11/15/2024	medium
200490	RHEL 9 : expat (RHSA-2024:3926)	Nessus	Red Hat Local Security Checks	6/13/2024	11/7/2024	high
207413	Debian dla-3893 : expat - security update	Nessus	Debian Local Security Checks	9/19/2024	9/19/2024	critical
197171	SUSE SLES12 Security Update : python3 (SUSE-SU-2024:1657-1)	Nessus	SuSE Local Security Checks	5/16/2024	5/16/2024	high
192895	AlmaLinux 8 : expat (ALSA-2024:1615)	Nessus	Alma Linux Local Security Checks	4/3/2024	4/5/2024	high
193073	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : expat (SUSE-SU-2024:1129-1)	Nessus	SuSE Local Security Checks	4/9/2024	11/4/2024	high

Detections

Analytics

Plugins Search

high

high

high

medium

high

critical

high

high

high