CVE-2024-45490

Mô tả

Tham khảo

• libexpat/libexpat · Issue Tracking
• libexpat/libexpat#890 · Patch
• seclists.org/fulldisclosure/2024/Dec/10
• seclists.org/fulldisclosure/2024/Dec/12
• seclists.org/fulldisclosure/2024/Dec/6
• seclists.org/fulldisclosure/2024/Dec/7
• seclists.org/fulldisclosure/2024/Dec/8
• lists.debian.org/debian-lts-announce/2024/09/msg00036.html
• security.netapp.com/advisory/ntap-20241018-0004
• cert-portal.siemens.com/productcert/html/ssa-082556.html
• cert-portal.siemens.com/productcert/html/ssa-613116.html

Lỗ hổng khác của libexpat

• CVE-2026-76957CAO 7.8libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is simi…
• CVE-2026-76956CAO 7.5In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in bein…
• CVE-2026-66046CAO 7.5Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xml…
• CVE-2026-56412TRUNG BÌNH 5.9libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls fr…
• CVE-2026-56411TRUNG BÌNH 6.9xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.