Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-50602

Fixed in a distro release EPSS 1%CVSS 5.9

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

Published 2024-10-27 · CVE record · OSV

Products: libexpat_project libexpat, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP, Siemens RUGGEDCOM ROX MX5000, Siemens RUGGEDCOM ROX MX5000RE, Siemens RUGGEDCOM ROX RX1400, Siemens RUGGEDCOM ROX RX1500, Siemens RUGGEDCOM ROX RX1501, Siemens RUGGEDCOM ROX RX1510, Siemens RUGGEDCOM ROX RX1511, Siemens RUGGEDCOM ROX RX1512, Siemens RUGGEDCOM ROX RX1524, Siemens RUGGEDCOM ROX RX1536, Siemens RUGGEDCOM ROX RX5000, Siemens RUGGEDCOM RST2428P, Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family

Distro releases

ReleasePackageFixed in
AlmaLinux 8expat2.2.5-16.el8_10
AlmaLinux 8expat-devel2.2.5-16.el8_10
AlmaLinux 9expat2.5.0-3.el9_5.1
AlmaLinux 9expat-devel2.5.0-3.el9_5.1
Alpine 3.17expat2.6.4-r0
Alpine 3.18expat2.6.4-r0
Alpine 3.19expat2.6.4-r0
Alpine 3.20expat2.6.4-r0
Alpine 3.21expat2.6.4-r0
Alpine 3.22expat2.6.4-r0
Alpine 3.23expat2.6.4-r0
Alpine 3.24expat2.6.4-r0
Amazon Linux 2expat2.1.0-15.amzn2.0.5
Amazon Linux 2expat-devel2.1.0-15.amzn2.0.5
Amazon Linux 2expat-static2.1.0-15.amzn2.0.5
Amazon Linux 2thunderbird128.8.1-1.amzn2.0.4
Amazon Linux 2023expat2.6.3-1.amzn2023.0.2
Amazon Linux 2023expat-devel2.6.3-1.amzn2023.0.2
Amazon Linux 2023expat-static2.6.3-1.amzn2023.0.2
Chainguardexpat2.6.4-r0
Chainguardpython-3.103.10.16-r0
Chainguardpython-3.10-base3.10.16-r0
Chainguardpython-3.10-base-dev3.10.16-r0
Chainguardpython-3.10-dev3.10.16-r0
Chainguardpython-3.10-doc3.10.16-r0
Chainguardpython-3.113.11.11-r0
Chainguardpython-3.123.12.8-r0
Chainguardpython-3.12-base3.12.8-r0
Chainguardpython-3.12-base-dev3.12.8-r0
Chainguardpython-3.12-dev3.12.8-r0
Chainguardpython-3.12-doc3.12.8-r0
Chainguardpython-3.133.13.1-r0
Chainguardpython-3.13-base3.13.1-r0
Chainguardpython-3.13-base-dev3.13.1-r0
Chainguardpython-3.13-dev3.13.1-r0
Chainguardpython-3.13-doc3.13.1-r0
Chainguardpython-3.93.9.21-r0
Chainguardpython-3.9-base3.9.21-r0
Chainguardpython-3.9-base-dev3.9.21-r0
Chainguardpython-3.9-dev3.9.21-r0
Chainguardpython-3.9-doc3.9.21-r0
Debian 11expat2.2.10-2+deb11u7
Debian 12expat2.5.0-1+deb12u2
Debian 12libxmltokno fix
Debian 13expat2.6.3-2
Debian 14expat2.6.3-2
Red Hat Enterprise Linux 8expat0:2.2.5-16.el8_10
Red Hat Enterprise Linux 8expat-debuginfo0:2.2.5-16.el8_10
Red Hat Enterprise Linux 8expat-debugsource0:2.2.5-16.el8_10
Red Hat Enterprise Linux 8expat-devel0:2.2.5-16.el8_10
Red Hat Enterprise Linux 9expat0:2.5.0-3.el9_5.1
Red Hat Enterprise Linux 9expat-debuginfo0:2.5.0-3.el9_5.1
Red Hat Enterprise Linux 9expat-debugsource0:2.5.0-3.el9_5.1
Red Hat Enterprise Linux 9expat-devel0:2.5.0-3.el9_5.1
Red Hat rhel eus 9.2expat0:2.5.0-1.el9_2.2
Red Hat rhel eus 9.2expat-debuginfo0:2.5.0-1.el9_2.2
Red Hat rhel eus 9.2expat-debugsource0:2.5.0-1.el9_2.2
Red Hat rhel eus 9.2expat-devel0:2.5.0-1.el9_2.2
Red Hat rhel eus 9.4expat0:2.5.0-2.el9_4.2
Red Hat rhel eus 9.4expat-debuginfo0:2.5.0-2.el9_4.2
Red Hat rhel eus 9.4expat-debugsource0:2.5.0-2.el9_4.2
Red Hat rhel eus 9.4expat-devel0:2.5.0-2.el9_4.2
Rocky Linux 8expat0:2.2.5-16.el8_10
SUSE Linux Enterprise Micro 5.1expat2.2.5-150000.3.33.1
SUSE Linux Enterprise Micro 5.2expat2.2.5-150000.3.33.1
SUSE Linux Enterprise Micro 5.2mozjs6060.9.0-150200.6.8.1
SUSE Linux Enterprise Micro 5.3expat2.4.4-150400.3.25.1
SUSE Linux Enterprise Micro 5.3mozjs6060.9.0-150200.6.8.1
SUSE Linux Enterprise Micro 5.4expat2.4.4-150400.3.25.1
SUSE Linux Enterprise Micro 5.4mozjs6060.9.0-150200.6.8.1
SUSE Linux Enterprise Micro 5.5expat2.4.4-150400.3.25.1
SUSE Linux Enterprise Module for Basesystem 15 SP5expat2.4.4-150400.3.25.1
SUSE Linux Enterprise Module for Basesystem 15 SP6expat2.4.4-150400.3.25.1
SUSE Linux Enterprise Module for Basesystem 15 SP7mozjs6060.9.0-150200.6.8.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP5mozjs7878.15.0-150400.3.11.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6mozjs115115.4.0-150600.3.6.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7mozjs6060.9.0-150200.6.8.1
SUSE Linux Enterprise Module for Package Hub 15 SP5mozjs7878.15.0-150400.3.11.1
SUSE Linux Enterprise Module for Package Hub 15 SP5python3-wxPython4.1.1-150400.10.1
SUSE Linux Enterprise Module for Package Hub 15 SP6mozjs7878.15.0-150400.3.11.1
SUSE Linux Enterprise Module for Package Hub 15 SP6python3-wxPython4.1.1-150400.10.1
SUSE Linux Enterprise Module for Package Hub 15 SP7mozjs5252.6.0-150000.3.9.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5expat2.1.0-21.40.1
SUSE Linux Micro 6.0expat2.7.1-1.1
SUSE Linux Micro 6.0expat2.5.0-4.1
SUSE Linux Micro 6.1expat2.7.1-slfo.1.1_1.1
SUSE Linux Micro 6.1expat2.5.0-slfo.1.1_2.1
Ubuntu 16.04 LTScadaverno fix
Ubuntu 16.04 LTSgdcmno fix
Ubuntu 16.04 LTSinsighttoolkit4no fix
Ubuntu 16.04 LTSmatanzano fix
Ubuntu 16.04 LTSsmartno fix
Ubuntu 16.04 LTStdomno fix
Ubuntu 16.04 LTSwbxml2no fix
Ubuntu 18.04 LTScadaverno fix
Ubuntu 18.04 LTSgdcmno fix
Ubuntu 18.04 LTSinsighttoolkit4no fix
Ubuntu 18.04 LTSmatanzano fix
Ubuntu 18.04 LTSsmartno fix
Ubuntu 18.04 LTStdomno fix
Ubuntu 18.04 LTSvnc4no fix
Ubuntu 18.04 LTSwbxml2no fix
Ubuntu 20.04 LTScadaverno fix
Ubuntu 20.04 LTSexpat2.2.9-1ubuntu0.8
Ubuntu 20.04 LTSinsighttoolkit4no fix
Ubuntu 20.04 LTSmatanzano fix
Ubuntu 20.04 LTStdomno fix
Ubuntu 20.04 LTSwbxml2no fix
Ubuntu 22.04 LTScadaverno fix
Ubuntu 22.04 LTSexpat2.4.7-1ubuntu0.5
Ubuntu 22.04 LTSinsighttoolkit4no fix
Ubuntu 22.04 LTSmatanzano fix
Ubuntu 22.04 LTStdomno fix
Ubuntu 22.04 LTSwbxml2no fix
Ubuntu 24.04 LTScadaverno fix
Ubuntu 24.04 LTSexpat2.6.1-2ubuntu0.2
Ubuntu 24.04 LTSmatanzano fix
Ubuntu 24.04 LTStdomno fix
Ubuntu 24.04 LTSwbxml2no fix
Ubuntu 25.10cadaverno fix
Ubuntu 25.10matanzano fix
Ubuntu 25.10swish-eno fix
Ubuntu 25.10tdomno fix
Ubuntu 25.10wbxml2no fix
Ubuntu 25.10xmlrpc-cno fix
Ubuntu 26.04 LTScadaverno fix
Ubuntu 26.04 LTSmatanzano fix
Ubuntu 26.04 LTStdomno fix
Ubuntu 26.04 LTSwbxml2no fix
Ubuntu 26.04 LTSxmlrpc-cno fix
Ubuntu 26.10cadaverno fix
Ubuntu 26.10matanzano fix
Ubuntu 26.10swish-eno fix
Ubuntu 26.10tdomno fix
Ubuntu 26.10wbxml2no fix
Ubuntu 26.10xmlrpc-cno fix
Ubuntu Pro 14.04 LTScoin3no fix
Ubuntu Pro 14.04 LTSexpat2.1.0-4ubuntu1.4+esm10
Ubuntu Pro 14.04 LTSvnc4no fix
Ubuntu Pro 14.04 LTSvtkno fix
Ubuntu Pro 14.04 LTSxmlrpc-cno fix
Ubuntu Pro 16.04 LTSayttmno fix
Ubuntu Pro 16.04 LTScableswigno fix
Ubuntu Pro 16.04 LTScoin3no fix
Ubuntu Pro 16.04 LTSexpat2.1.0-7ubuntu0.16.04.5+esm10
Ubuntu Pro 16.04 LTSswish-eno fix
Ubuntu Pro 16.04 LTSvnc4no fix
Ubuntu Pro 16.04 LTSvtkno fix
Ubuntu Pro 16.04 LTSxmlrpc-cno fix
Ubuntu Pro 18.04 LTScoin3no fix
Ubuntu Pro 18.04 LTSexpat2.2.5-3ubuntu0.9+esm2
Ubuntu Pro 18.04 LTSswish-eno fix
Ubuntu Pro 18.04 LTSxmlrpc-cno fix
Ubuntu Pro 20.04 LTSswish-eno fix
Ubuntu Pro 20.04 LTSxmlrpc-cno fix
Ubuntu Pro 22.04 LTSswish-eno fix
Ubuntu Pro 22.04 LTSxmlrpc-cno fix
Ubuntu Pro 24.04 LTSswish-eno fix
Ubuntu Pro 24.04 LTSxmlrpc-cno fix
Ubuntu Pro 26.04 LTSswish-eno fix
Wolfiexpat2.6.4-r0
Wolfipython-3.103.10.16-r0
Wolfipython-3.10-base3.10.16-r0
Wolfipython-3.10-base-dev3.10.16-r0
Wolfipython-3.10-dev3.10.16-r0
Wolfipython-3.10-doc3.10.16-r0
Wolfipython-3.113.11.11-r0
Wolfipython-3.123.12.8-r0
Wolfipython-3.12-base3.12.8-r0
Wolfipython-3.12-base-dev3.12.8-r0
Wolfipython-3.12-dev3.12.8-r0
Wolfipython-3.12-doc3.12.8-r0
Wolfipython-3.133.13.1-r0
Wolfipython-3.13-base3.13.1-r0
Wolfipython-3.13-base-dev3.13.1-r0
Wolfipython-3.13-dev3.13.1-r0
Wolfipython-3.13-doc3.13.1-r0
openSUSE Leap 15.5expat2.4.4-150400.3.25.1
openSUSE Leap 15.5mozjs7878.15.0-150400.3.11.1
openSUSE Leap 15.5python3-wxPython4.1.1-150400.10.1
openSUSE Leap 15.6expat2.4.4-150400.3.25.1
openSUSE Leap 15.6mozjs115115.4.0-150600.3.6.1
openSUSE Leap 15.6mozjs5252.6.0-150000.3.9.1
openSUSE Leap 15.6mozjs6060.9.0-150200.6.8.1
openSUSE Leap 15.6mozjs7878.15.0-150400.3.11.1
openSUSE Leap 15.6python3-wxPython4.1.1-150400.10.1
openSUSE Leap 15.6python311-wxPython4.1.1-150400.3.8.1
openSUSE Leap Micro 5.5expat2.4.4-150400.3.25.1
openSUSE Tumbleweedaudacity3.7.0-1.1
openSUSE Tumbleweedexpat2.6.4-1.1
openSUSE Tumbleweedgama2.31-1.1
openSUSE Tumbleweedmozjs115115.15.0-3.1
openSUSE Tumbleweedmozjs128128.5.1-2.1
openSUSE Tumbleweedmozjs7878.15.0-7.1
openSUSE Tumbleweedparaview5.12.1-2.1
openSUSE Tumbleweedxsd4.1.0-3.1