Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-45490

Fixed in a distro release EPSS 2%CVSS 9.8

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

Published 2024-08-30 · CVE record · OSV

Products: libexpat_project libexpat, Siemens RUGGEDCOM RST2428P, Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Distro releases

ReleasePackageFixed in
AlmaLinux 8expat2.2.5-15.el8_10
AlmaLinux 8expat-devel2.2.5-15.el8_10
AlmaLinux 9expat2.5.0-2.el9_4.1
AlmaLinux 9expat-devel2.5.0-2.el9_4.1
Alpine 3.17expat2.6.3-r0
Alpine 3.18expat2.6.3-r0
Alpine 3.19expat2.6.3-r0
Alpine 3.20expat2.6.3-r0
Alpine 3.21expat2.6.3-r0
Alpine 3.22expat2.6.3-r0
Alpine 3.23expat2.6.3-r0
Alpine 3.24expat2.6.3-r0
Amazon Linux 2expat2.1.0-15.amzn2.0.4
Amazon Linux 2expat-devel2.1.0-15.amzn2.0.4
Amazon Linux 2expat-static2.1.0-15.amzn2.0.4
Amazon Linux 2023expat2.6.3-1.amzn2023.0.1
Amazon Linux 2023expat-devel2.6.3-1.amzn2023.0.1
Amazon Linux 2023expat-static2.6.3-1.amzn2023.0.1
Chainguardexpat2.6.3-r0
Debian 11expat2.2.10-2+deb11u6
Debian 12expat2.5.0-1+deb12u1
Debian 12libxmltokno fix
Debian 13expat2.6.2-2
Debian 14expat2.6.2-2
Red Hat Enterprise Linux 8expat0:2.2.5-15.el8_10
Red Hat Enterprise Linux 8expat-debuginfo0:2.2.5-15.el8_10
Red Hat Enterprise Linux 8expat-debugsource0:2.2.5-15.el8_10
Red Hat Enterprise Linux 8expat-devel0:2.2.5-15.el8_10
Red Hat Enterprise Linux 9expat0:2.5.0-2.el9_4.1
Red Hat Enterprise Linux 9expat-debuginfo0:2.5.0-2.el9_4.1
Red Hat Enterprise Linux 9expat-debugsource0:2.5.0-2.el9_4.1
Red Hat Enterprise Linux 9expat-devel0:2.5.0-2.el9_4.1
Rocky Linux 8expat0:2.2.5-15.el8_10
Rocky Linux 9expat0:2.5.0-2.el9_4.1
SUSE Linux Enterprise Micro 5.1expat2.2.5-150000.3.30.1
SUSE Linux Enterprise Micro 5.2expat2.2.5-150000.3.30.1
SUSE Linux Enterprise Micro 5.2mozjs6060.9.0-150200.6.8.1
SUSE Linux Enterprise Micro 5.3expat2.4.4-150400.3.22.1
SUSE Linux Enterprise Micro 5.3mozjs6060.9.0-150200.6.8.1
SUSE Linux Enterprise Micro 5.4expat2.4.4-150400.3.22.1
SUSE Linux Enterprise Micro 5.4mozjs6060.9.0-150200.6.8.1
SUSE Linux Enterprise Micro 5.5expat2.4.4-150400.3.22.1
SUSE Linux Enterprise Module for Basesystem 15 SP5expat2.4.4-150400.3.22.1
SUSE Linux Enterprise Module for Basesystem 15 SP6expat2.4.4-150400.3.22.1
SUSE Linux Enterprise Module for Basesystem 15 SP7mozjs6060.9.0-150200.6.8.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP5mozjs7878.15.0-150400.3.6.2
SUSE Linux Enterprise Module for Desktop Applications 15 SP6mozjs115115.4.0-150600.3.3.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7mozjs6060.9.0-150200.6.8.1
SUSE Linux Enterprise Module for Package Hub 15 SP5mozjs7878.15.0-150400.3.6.2
SUSE Linux Enterprise Module for Package Hub 15 SP6mozjs7878.15.0-150400.3.6.2
SUSE Linux Enterprise Module for Package Hub 15 SP7mozjs5252.6.0-150000.3.9.1
SUSE Linux Enterprise Server 12 SP5expat2.1.0-21.37.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5expat2.1.0-21.37.1
SUSE Linux Enterprise Software Development Kit 12 SP5expat2.1.0-21.37.1
SUSE Linux Micro 6.0expat2.5.0-3.1
SUSE Linux Micro 6.0expat2.7.1-1.1
SUSE Linux Micro 6.1expat2.7.1-slfo.1.1_1.1
Ubuntu 16.04 LTScadaverno fix
Ubuntu 16.04 LTSgdcmno fix
Ubuntu 16.04 LTSinsighttoolkit4no fix
Ubuntu 16.04 LTSmatanzano fix
Ubuntu 16.04 LTSsmartno fix
Ubuntu 16.04 LTStdomno fix
Ubuntu 16.04 LTSwbxml2no fix
Ubuntu 18.04 LTScadaverno fix
Ubuntu 18.04 LTSgdcmno fix
Ubuntu 18.04 LTSinsighttoolkit4no fix
Ubuntu 18.04 LTSmatanzano fix
Ubuntu 18.04 LTSsmartno fix
Ubuntu 18.04 LTStdomno fix
Ubuntu 18.04 LTSvnc4no fix
Ubuntu 18.04 LTSwbxml2no fix
Ubuntu 20.04 LTScadaverno fix
Ubuntu 20.04 LTSexpat2.2.9-1ubuntu0.7
Ubuntu 20.04 LTSinsighttoolkit4no fix
Ubuntu 20.04 LTSmatanzano fix
Ubuntu 20.04 LTStdomno fix
Ubuntu 20.04 LTSwbxml2no fix
Ubuntu 22.04 LTScadaverno fix
Ubuntu 22.04 LTSexpat2.4.7-1ubuntu0.4
Ubuntu 22.04 LTSinsighttoolkit4no fix
Ubuntu 22.04 LTSmatanzano fix
Ubuntu 22.04 LTStdomno fix
Ubuntu 22.04 LTSwbxml2no fix
Ubuntu 24.04 LTScadaverno fix
Ubuntu 24.04 LTSexpat2.6.1-2ubuntu0.1
Ubuntu 24.04 LTSmatanzano fix
Ubuntu 24.04 LTStdomno fix
Ubuntu 24.04 LTSwbxml2no fix
Ubuntu 25.10cadaverno fix
Ubuntu 25.10matanzano fix
Ubuntu 25.10swish-eno fix
Ubuntu 25.10tdomno fix
Ubuntu 25.10wbxml2no fix
Ubuntu 25.10xmlrpc-cno fix
Ubuntu 26.04 LTScadaverno fix
Ubuntu 26.04 LTSmatanzano fix
Ubuntu 26.04 LTStdomno fix
Ubuntu 26.04 LTSwbxml2no fix
Ubuntu 26.04 LTSxmlrpc-cno fix
Ubuntu 26.10cadaverno fix
Ubuntu 26.10matanzano fix
Ubuntu 26.10swish-eno fix
Ubuntu 26.10tdomno fix
Ubuntu 26.10wbxml2no fix
Ubuntu 26.10xmlrpc-cno fix
Ubuntu Pro 14.04 LTScoin3no fix
Ubuntu Pro 14.04 LTSexpat2.1.0-4ubuntu1.4+esm9
Ubuntu Pro 14.04 LTSvnc4no fix
Ubuntu Pro 14.04 LTSvtkno fix
Ubuntu Pro 14.04 LTSxmlrpc-cno fix
Ubuntu Pro 16.04 LTSayttmno fix
Ubuntu Pro 16.04 LTScableswigno fix
Ubuntu Pro 16.04 LTScoin3no fix
Ubuntu Pro 16.04 LTSexpat2.1.0-7ubuntu0.16.04.5+esm9
Ubuntu Pro 16.04 LTSlibxmltok1.2-3ubuntu0.16.04.1~esm4
Ubuntu Pro 16.04 LTSswish-eno fix
Ubuntu Pro 16.04 LTSvnc4no fix
Ubuntu Pro 16.04 LTSvtkno fix
Ubuntu Pro 16.04 LTSxmlrpc-cno fix
Ubuntu Pro 18.04 LTScoin3no fix
Ubuntu Pro 18.04 LTSexpat2.2.5-3ubuntu0.9+esm1
Ubuntu Pro 18.04 LTSlibxmltok1.2-4ubuntu0.18.04.1~esm3
Ubuntu Pro 18.04 LTSswish-eno fix
Ubuntu Pro 18.04 LTSxmlrpc-cno fix
Ubuntu Pro 20.04 LTSlibxmltok1.2-4ubuntu0.20.04.1~esm3
Ubuntu Pro 20.04 LTSswish-eno fix
Ubuntu Pro 20.04 LTSxmlrpc-cno fix
Ubuntu Pro 22.04 LTSlibxmltok1.2-4ubuntu0.22.04.1~esm3
Ubuntu Pro 22.04 LTSswish-eno fix
Ubuntu Pro 22.04 LTSxmlrpc-cno fix
Ubuntu Pro 24.04 LTSlibxmltok1.2-4.1ubuntu2.24.0.4.1+esm1
Ubuntu Pro 24.04 LTSswish-eno fix
Ubuntu Pro 24.04 LTSxmlrpc-cno fix
Ubuntu Pro 26.04 LTSswish-eno fix
Wolfiexpat2.6.3-r0
openSUSE Leap 15.5expat2.4.4-150400.3.22.1
openSUSE Leap 15.5mozjs7878.15.0-150400.3.6.2
openSUSE Leap 15.6expat2.4.4-150400.3.22.1
openSUSE Leap 15.6mozjs115115.4.0-150600.3.3.1
openSUSE Leap 15.6mozjs5252.6.0-150000.3.9.1
openSUSE Leap 15.6mozjs6060.9.0-150200.6.8.1
openSUSE Leap 15.6mozjs7878.15.0-150400.3.6.2
openSUSE Leap Micro 5.5expat2.4.4-150400.3.22.1
openSUSE Tumbleweedexpat2.6.3-1.1
openSUSE Tumbleweedmozjs115115.4.0-5.1
openSUSE Tumbleweedmozjs128128.2.0-2.1
openSUSE Tumbleweedmozjs7878.15.0-5.1
openSUSE Tumbleweedx32704.3-4.1