[UPDATE] [mittel] expat: Schwachstelle ermöglicht Denial of Service

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-13 10:09 UTC
  • Importiert: 2026-10-14 10:29 UTC
  • CVSS: 7.5
  • Quelle-ID: cert_bund
  • uid_hash: ce4b223d1dd623d32f0fcc52dfdac6428b9b7107a996be1c0d8cd50d46b6da8e

Inhalt

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in expat ausnutzen, um einen Denial of Service Angriff durchzuführen.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2024-8176

HIGH

7.5

HIGH

7.5

2025-03-14

Externe Referenzen

Bezeichnung Typ CVE Quelle

Expat 2.7.0 Changelog vom 2025-03-13

POC - wid_csaf

Oracle Linux Security Advisory ELSA-2025-3531 vom 2025-04-03

EXTERNAL - wid_csaf

OpenBSD 7.5 Errata vom 2025-03-18

EXTERNAL - wid_csaf

OpenBSD 7.6 Errata vom 2025-03-18

EXTERNAL - wid_csaf

Red Hat Security Advisory RHSA-2025:13681 vom 2025-08-14

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:22033 vom 2025-11-25

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:22034 vom 2025-11-25

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:22035 vom 2025-11-25

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:22607 vom 2025-12-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:22785 vom 2025-12-05

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:22842 vom 2025-12-08

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:22871 vom 2025-12-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:3531 vom 2025-04-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:3734 vom 2025-04-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:3763 vom 2025-04-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:3913 vom 2025-04-15

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:4005 vom 2025-04-17

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:4048 vom 2025-04-23

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:4240 vom 2025-04-28

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:4446 vom 2025-05-05

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:4447 vom 2025-05-05

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:4448 vom 2025-05-05

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:4449 vom 2025-05-05

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:7444 vom 2025-05-13

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:7512 vom 2025-05-13

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:8059 vom 2025-05-21

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:8274 vom 2025-05-28

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:8277 vom 2025-05-28

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:8278 vom 2025-05-28

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:0950 vom 2026-01-22

VENDOR - wid_csaf

IBM Security Bulletin 7233966 vom 2025-05-20

EXTERNAL - wid_csaf

Hartwork Blog vom 2025-03-13

EXTERNAL - wid_csaf

Fedora Security Advisory FEDORA-2025-20E86A3C86 vom 2025-03-14

EXTERNAL - wid_csaf

Fedora Security Advisory FEDORA-2025-D487E15B69 vom 2025-03-14

EXTERNAL - wid_csaf

Fedora Security Advisory FEDORA-2025-F2EA2821CC vom 2025-03-14

EXTERNAL - wid_csaf

Container-Optimized OS release notes vom 2025-04-16

EXTERNAL - wid_csaf

Tenable Security Advisory TNS-2025-10 vom 2025-05-22

EXTERNAL - wid_csaf

Tenable Security Advisory TNS-2025-24 vom 2025-12-15

EXTERNAL - wid_csaf

libexpat GitHub Issue 893 vom 2025-03-13

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-21974 vom 2025-11-25

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-3913 vom 2025-04-16

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-4048 vom 2025-04-22

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-7444 vom 2025-05-22

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-7512 vom 2025-06-28

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-22715 vom 2026-07-17

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-64810 vom 2026-09-08

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-74001 vom 2026-10-01

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2025:14952-1 vom 2025-04-03

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:1186-1 vom 2025-04-09

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:1201-1 vom 2025-04-11

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:1295-1 vom 2025-04-16

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:20311-1 vom 2025-06-04

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:20207-1 vom 2025-06-04

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:03239-1 vom 2025-09-16

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:4623-1 vom 2026-10-12

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:4619-1 vom 2026-10-12

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:4615-1 vom 2026-10-12

EXTERNAL - wid_csaf

Hitachi Cybersecurity Advisory

EXTERNAL - wid_csaf

Red Hat Security Advisory RHSA-2025:8274 vom 2025-05-29

EXTERNAL - wid_csaf

Red Hat Security Advisory RHSA-2025:8278 vom 2025-05-29

EXTERNAL - wid_csaf

NetApp Security Advisory NTAP-20250328-0009 vom 2025-03-28

EXTERNAL - wid_csaf

Ubuntu Security Notice USN-7424-1 vom 2025-04-08

EXTERNAL - wid_csaf

Dell Security Advisory DSA-2025-415 vom 2025-12-22

EXTERNAL - wid_csaf

FreeBSD Advisory

EXTERNAL - wid_csaf

IBM Security Bulletin 7233150 vom 2025-05-12

EXTERNAL - wid_csaf

IBM Security Bulletin 7238159 vom 2025-06-26

EXTERNAL - wid_csaf

IBM Security Bulletin 7238986 vom 2025-07-07

EXTERNAL - wid_csaf

IBM Security Bulletin 7239012 vom 2025-07-07

EXTERNAL - wid_csaf

IBM Security Bulletin 7256201 vom 2026-01-05

EXTERNAL - wid_csaf

IBM Security Bulletin 7259886 vom 2026-02-06

EXTERNAL - wid_csaf

Meinberg Security Advisory MBGSA-2025.03 vom 2025-11-27

EXTERNAL - wid_csaf

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CERT-Bund (BSI)

cert_bund

government_cert - de https://wid.cert-bund.de/content/public/securityAdvisory/rss