CVE-2024-28757

Mô tả

Tham khảo

• openwall.com/lists/oss-security/2024/03/15/1 · Mailing List
• libexpat/libexpat · Exploit
• libexpat/libexpat#842 · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7 · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE · Mailing List
• security.netapp.com/advisory/ntap-20240322-0001 · Third Party Advisory
• lists.fedoraproject.org/archives/list/[email protected]/message/FPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD

Lỗ hổng khác của libexpat

• CVE-2026-118370CAO 8.2libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attackers to trigger ou…
• CVE-2026-117610CAO 7.5libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c that mishandles…
• CVE-2026-76957CAO 7.8libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is simi…
• CVE-2026-76956CAO 7.5In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in bein…
• CVE-2026-66046CAO 7.5Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xml…