Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-28757

Fixed in a distro release EPSS 2%CVSS 7.5

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).

Published 2024-03-10 · CVE record · OSV

Products: Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SINEC NMS, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Distro releases

ReleasePackageFixed in
AlmaLinux 9expat2.5.0-1.el9_3.1
AlmaLinux 9expat-devel2.5.0-1.el9_3.1
Alpine 3.16expat2.6.2-r0
Alpine 3.17expat2.6.2-r0
Alpine 3.18expat2.6.2-r0
Alpine 3.19expat2.6.2-r0
Alpine 3.20expat2.6.2-r0
Alpine 3.21expat2.6.2-r0
Alpine 3.22expat2.6.2-r0
Alpine 3.23expat2.6.2-r0
Alpine 3.24expat2.6.2-r0
Amazon Linux 2023expat2.5.0-1.amzn2023.0.4
Amazon Linux 2023expat-devel2.5.0-1.amzn2023.0.4
Amazon Linux 2023expat-static2.5.0-1.amzn2023.0.4
Amazon Linux 2023xmlrpc-c1.51.08-2.amzn2023.0.2
Amazon Linux 2023xmlrpc-c-apps1.51.08-2.amzn2023.0.2
Amazon Linux 2023xmlrpc-c-c++1.51.08-2.amzn2023.0.2
Amazon Linux 2023xmlrpc-c-client1.51.08-2.amzn2023.0.2
Amazon Linux 2023xmlrpc-c-client++1.51.08-2.amzn2023.0.2
Amazon Linux 2023xmlrpc-c-devel1.51.08-2.amzn2023.0.2
Chainguardexpat2.6.2-r0
Debian 12expat2.5.0-1+deb12u4
Debian 12libxmltokno fix
Debian 13expat2.6.1-2
Debian 14expat2.6.1-2
Red Hat Enterprise Linux 8expat0:2.5.0-1.el8_10
Red Hat Enterprise Linux 8expat-debuginfo0:2.5.0-1.el8_10
Red Hat Enterprise Linux 8expat-debugsource0:2.5.0-1.el8_10
Red Hat Enterprise Linux 8expat-devel0:2.5.0-1.el8_10
Red Hat Enterprise Linux 9expat0:2.5.0-1.el9_3.1
Red Hat Enterprise Linux 9expat0:2.5.0-2.el9_4
Red Hat Enterprise Linux 9expat-debuginfo0:2.5.0-1.el9_3.1
Red Hat Enterprise Linux 9expat-debuginfo0:2.5.0-2.el9_4
Red Hat Enterprise Linux 9expat-debugsource0:2.5.0-1.el9_3.1
Red Hat Enterprise Linux 9expat-debugsource0:2.5.0-2.el9_4
Red Hat Enterprise Linux 9expat-devel0:2.5.0-1.el9_3.1
Red Hat Enterprise Linux 9expat-devel0:2.5.0-2.el9_4
Red Hat rhel eus 9.2expat0:2.5.0-1.el9_2.1
Red Hat rhel eus 9.2expat-debuginfo0:2.5.0-1.el9_2.1
Red Hat rhel eus 9.2expat-debugsource0:2.5.0-1.el9_2.1
Red Hat rhel eus 9.2expat-devel0:2.5.0-1.el9_2.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSexpat2.4.4-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSexpat2.4.4-150400.3.17.1
SUSE Linux Enterprise Micro 5.3expat2.4.4-150400.3.17.1
SUSE Linux Enterprise Micro 5.4expat2.4.4-150400.3.17.1
SUSE Linux Enterprise Micro 5.5expat2.4.4-150400.3.17.1
SUSE Linux Enterprise Module for Basesystem 15 SP5expat2.4.4-150400.3.17.1
SUSE Linux Enterprise Server 15 SP4-LTSSexpat2.4.4-150400.3.17.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4expat2.4.4-150400.3.17.1
SUSE Linux Micro 6.0expat2.5.0-3.1
SUSE Linux Micro 6.0expat2.7.1-1.1
SUSE Linux Micro 6.1expat2.7.1-slfo.1.1_1.1
SUSE Manager Proxy 4.3expat2.4.4-150400.3.17.1
SUSE Manager Server 4.3expat2.4.4-150400.3.17.1
Ubuntu 16.04 LTScadaverno fix
Ubuntu 16.04 LTSgdcmno fix
Ubuntu 16.04 LTSinsighttoolkit4no fix
Ubuntu 16.04 LTSmatanzano fix
Ubuntu 16.04 LTSsmartno fix
Ubuntu 16.04 LTStdomno fix
Ubuntu 16.04 LTSwbxml2no fix
Ubuntu 18.04 LTScadaverno fix
Ubuntu 18.04 LTSgdcmno fix
Ubuntu 18.04 LTSinsighttoolkit4no fix
Ubuntu 18.04 LTSmatanzano fix
Ubuntu 18.04 LTSsmartno fix
Ubuntu 18.04 LTStdomno fix
Ubuntu 18.04 LTSvnc4no fix
Ubuntu 18.04 LTSwbxml2no fix
Ubuntu 20.04 LTScadaverno fix
Ubuntu 20.04 LTSinsighttoolkit4no fix
Ubuntu 20.04 LTSmatanzano fix
Ubuntu 20.04 LTStdomno fix
Ubuntu 20.04 LTSwbxml2no fix
Ubuntu 22.04 LTScadaverno fix
Ubuntu 22.04 LTSexpat2.4.7-1ubuntu0.3
Ubuntu 22.04 LTSinsighttoolkit4no fix
Ubuntu 22.04 LTSlibxmltokno fix
Ubuntu 22.04 LTSmatanzano fix
Ubuntu 22.04 LTStdomno fix
Ubuntu 22.04 LTSwbxml2no fix
Ubuntu 24.04 LTScadaverno fix
Ubuntu 24.04 LTSlibxmltokno fix
Ubuntu 24.04 LTSmatanzano fix
Ubuntu 24.04 LTStdomno fix
Ubuntu 24.04 LTSwbxml2no fix
Ubuntu 25.10cadaverno fix
Ubuntu 25.10matanzano fix
Ubuntu 25.10swish-eno fix
Ubuntu 25.10tdomno fix
Ubuntu 25.10wbxml2no fix
Ubuntu 25.10xmlrpc-cno fix
Ubuntu 26.04 LTScadaverno fix
Ubuntu 26.04 LTSmatanzano fix
Ubuntu 26.04 LTStdomno fix
Ubuntu 26.04 LTSwbxml2no fix
Ubuntu 26.04 LTSxmlrpc-cno fix
Ubuntu 26.10cadaverno fix
Ubuntu 26.10matanzano fix
Ubuntu 26.10swish-eno fix
Ubuntu 26.10tdomno fix
Ubuntu 26.10wbxml2no fix
Ubuntu 26.10xmlrpc-cno fix
Ubuntu Pro 14.04 LTScoin3no fix
Ubuntu Pro 14.04 LTSexpatno fix
Ubuntu Pro 14.04 LTSvnc4no fix
Ubuntu Pro 14.04 LTSvtkno fix
Ubuntu Pro 14.04 LTSxmlrpc-cno fix
Ubuntu Pro 16.04 LTSayttmno fix
Ubuntu Pro 16.04 LTScableswigno fix
Ubuntu Pro 16.04 LTScoin3no fix
Ubuntu Pro 16.04 LTSexpatno fix
Ubuntu Pro 16.04 LTSlibxmltokno fix
Ubuntu Pro 16.04 LTSswish-eno fix
Ubuntu Pro 16.04 LTSvnc4no fix
Ubuntu Pro 16.04 LTSvtkno fix
Ubuntu Pro 16.04 LTSxmlrpc-cno fix
Ubuntu Pro 18.04 LTScoin3no fix
Ubuntu Pro 18.04 LTSexpatno fix
Ubuntu Pro 18.04 LTSlibxmltokno fix
Ubuntu Pro 18.04 LTSswish-eno fix
Ubuntu Pro 18.04 LTSxmlrpc-cno fix
Ubuntu Pro 20.04 LTSexpatno fix
Ubuntu Pro 20.04 LTSlibxmltokno fix
Ubuntu Pro 20.04 LTSswish-eno fix
Ubuntu Pro 20.04 LTSxmlrpc-cno fix
Ubuntu Pro 22.04 LTSswish-eno fix
Ubuntu Pro 22.04 LTSxmlrpc-cno fix
Ubuntu Pro 24.04 LTSswish-eno fix
Ubuntu Pro 24.04 LTSxmlrpc-cno fix
Ubuntu Pro 26.04 LTSswish-eno fix
Wolfiexpat2.6.2-r0
openSUSE Leap 15.5expat2.4.4-150400.3.17.1
openSUSE Leap Micro 5.3expat2.4.4-150400.3.17.1
openSUSE Leap Micro 5.4expat2.4.4-150400.3.17.1
openSUSE Tumbleweedexpat2.6.2-1.1