CVE-2024-8176

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
redhatCNA
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADPADP
---
---
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
Debian logo
Debian Releases
Debian Product
Codename
expat
bullseye
ignored
bookworm
ignored
bullseye (security)
vulnerable
bookworm (security)
vulnerable
sid
2.7.1-1
fixed
trixie
2.7.1-1
fixed
libxmltok
bookworm
ignored
bullseye
ignored
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
apache2
plucky
not-affected
oracular
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
not-affected
apr-util
plucky
not-affected
oracular
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
not-affected
ayttm
plucky
dne
oracular
dne
noble
dne
jammy
dne
focal
dne
xenial
needs-triage
cableswig
plucky
dne
oracular
dne
noble
dne
jammy
dne
focal
dne
xenial
needs-triage
cadaver
plucky
needs-triage
oracular
needs-triage
noble
needs-triage
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
cmake
plucky
not-affected
oracular
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
coin3
plucky
not-affected
oracular
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
needs-triage
xenial
needs-triage
trusty
needs-triage
expat
plucky
Fixed 2.7.1-1
released
oracular
Fixed 2.6.2-2ubuntu0.2
released
noble
Fixed 2.6.1-2ubuntu0.3
released
jammy
Fixed 2.4.7-1ubuntu0.6
released
focal
ignored
bionic
ignored
xenial
ignored
trusty
ignored
firefox
plucky
not-affected
oracular
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
gdcm
plucky
not-affected
oracular
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
needs-triage
xenial
needs-triage
trusty
not-affected
ghostscript
plucky
not-affected
oracular
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
insighttoolkit4
plucky
dne
oracular
dne
noble
dne
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
libxmltok
plucky
needs-triage
oracular
needs-triage
noble
needs-triage
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
matanza
plucky
ignored
oracular
ignored
noble
ignored
jammy
ignored
focal
ignored
bionic
needs-triage
xenial
needs-triage
smart
plucky
dne
oracular
dne
noble
dne
jammy
dne
focal
dne
bionic
needs-triage
xenial
needs-triage
swish-e
plucky
needs-triage
oracular
needs-triage
noble
needs-triage
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
tdom
plucky
needs-triage
oracular
needs-triage
noble
needs-triage
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
texlive-bin
plucky
not-affected
oracular
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
thunderbird
plucky
not-affected
oracular
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
vnc4
plucky
dne
oracular
dne
noble
dne
jammy
dne
focal
dne
bionic
needs-triage
xenial
needs-triage
trusty
needs-triage
vtk
plucky
dne
oracular
dne
noble
dne
jammy
dne
focal
dne
xenial
needs-triage
trusty
needs-triage
wbxml2
plucky
needs-triage
oracular
needs-triage
noble
needs-triage
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
xmlrpc-c
plucky
needs-triage
oracular
needs-triage
noble
needs-triage
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
trusty
needs-triage