CVE-2026-76956
Fixed in a distro release EPSS <1%CVSS 5.9
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.
Products: libexpat_project libexpat
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.21 | expat | 2.8.4-r0 |
| Alpine 3.22 | expat | 2.8.4-r0 |
| Alpine 3.23 | expat | 2.8.4-r0 |
| Alpine 3.24 | expat | 2.8.4-r0 |
| Debian 13 | expat | 2.9.0-1~deb13u1 |
| Debian 14 | expat | 2.8.4-1 |
| Red Hat hummingbird 1 | expat | 0:2.8.3-0.1.1.hum1 |
| Red Hat hummingbird 1 | expat | 0:2.8.4-0.1.hum1 |
| Red Hat hummingbird 1 | expat-devel | 0:2.8.3-0.1.1.hum1 |
| Red Hat hummingbird 1 | expat-devel | 0:2.8.4-0.1.hum1 |
| Red Hat hummingbird 1 | expat-static | 0:2.8.3-0.1.1.hum1 |
| Red Hat hummingbird 1 | expat-static | 0:2.8.4-0.1.hum1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | MozillaFirefox | 153.5.0-150400.157.16.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | MozillaFirefox | 153.5.0-150400.157.16.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | MozillaFirefox | 153.5.0-150400.157.16.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | MozillaFirefox | 153.5.0-150400.157.16.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Micro 5.3 | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Micro 5.4 | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Micro 5.5 | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | expat | 2.8.5-150700.3.15.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP7 | MozillaFirefox | 153.5.0-150400.157.16.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | MozillaThunderbird | 153.5.0-150400.13.9.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | MozillaFirefox | 153.5.0-118.16.2 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | expat | 2.8.5-21.55.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | MozillaFirefox | 153.5.0-150400.157.16.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | MozillaFirefox | 153.5.0-150400.157.16.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | MozillaFirefox | 153.5.0-150400.157.16.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Server 16.0 | MozillaFirefox | 153.5.0-160000.1.1 |
| SUSE Linux Enterprise Server 16.0 | expat | 2.8.4-160000.1.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | MozillaFirefox | 153.5.0-118.16.2 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | expat | 2.8.5-21.55.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | MozillaFirefox | 153.5.0-150400.157.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | MozillaFirefox | 153.5.0-150400.157.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | MozillaFirefox | 153.5.0-150400.157.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | expat | 2.8.5-150400.3.40.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | MozillaFirefox | 153.5.0-160000.1.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | expat | 2.8.4-160000.1.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP7 | MozillaThunderbird | 153.5.0-150400.13.9.1 |
| SUSE Linux Micro 6.2 | expat | 2.8.4-160000.1.1 |
| Ubuntu 16.04 LTS | cadaver | no fix |
| Ubuntu 16.04 LTS | gdcm | no fix |
| Ubuntu 16.04 LTS | insighttoolkit4 | no fix |
| Ubuntu 16.04 LTS | matanza | no fix |
| Ubuntu 16.04 LTS | smart | no fix |
| Ubuntu 16.04 LTS | tdom | no fix |
| Ubuntu 16.04 LTS | wbxml2 | no fix |
| Ubuntu 18.04 LTS | cadaver | no fix |
| Ubuntu 18.04 LTS | gdcm | no fix |
| Ubuntu 18.04 LTS | insighttoolkit4 | no fix |
| Ubuntu 18.04 LTS | matanza | no fix |
| Ubuntu 18.04 LTS | smart | no fix |
| Ubuntu 18.04 LTS | tdom | no fix |
| Ubuntu 18.04 LTS | vnc4 | no fix |
| Ubuntu 18.04 LTS | wbxml2 | no fix |
| Ubuntu 20.04 LTS | cadaver | no fix |
| Ubuntu 20.04 LTS | insighttoolkit4 | no fix |
| Ubuntu 20.04 LTS | matanza | no fix |
| Ubuntu 20.04 LTS | tdom | no fix |
| Ubuntu 20.04 LTS | wbxml2 | no fix |
| Ubuntu 22.04 LTS | cadaver | no fix |
| Ubuntu 22.04 LTS | insighttoolkit4 | no fix |
| Ubuntu 22.04 LTS | matanza | no fix |
| Ubuntu 22.04 LTS | tdom | no fix |
| Ubuntu 22.04 LTS | wbxml2 | no fix |
| Ubuntu 24.04 LTS | cadaver | no fix |
| Ubuntu 24.04 LTS | matanza | no fix |
| Ubuntu 24.04 LTS | tdom | no fix |
| Ubuntu 24.04 LTS | wbxml2 | no fix |
| Ubuntu 26.04 LTS | cadaver | no fix |
| Ubuntu 26.04 LTS | matanza | no fix |
| Ubuntu 26.04 LTS | tdom | no fix |
| Ubuntu 26.04 LTS | wbxml2 | no fix |
| Ubuntu 26.04 LTS | xmlrpc-c | no fix |
| Ubuntu 26.10 | cadaver | no fix |
| Ubuntu 26.10 | matanza | no fix |
| Ubuntu 26.10 | swish-e | no fix |
| Ubuntu 26.10 | tdom | no fix |
| Ubuntu 26.10 | wbxml2 | no fix |
| Ubuntu 26.10 | xmlrpc-c | no fix |
| Ubuntu Pro 14.04 LTS | coin3 | no fix |
| Ubuntu Pro 14.04 LTS | vnc4 | no fix |
| Ubuntu Pro 14.04 LTS | vtk | no fix |
| Ubuntu Pro 14.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 16.04 LTS | ayttm | no fix |
| Ubuntu Pro 16.04 LTS | cableswig | no fix |
| Ubuntu Pro 16.04 LTS | coin3 | no fix |
| Ubuntu Pro 16.04 LTS | libxmltok | no fix |
| Ubuntu Pro 16.04 LTS | swish-e | no fix |
| Ubuntu Pro 16.04 LTS | vnc4 | no fix |
| Ubuntu Pro 16.04 LTS | vtk | no fix |
| Ubuntu Pro 16.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 18.04 LTS | coin3 | no fix |
| Ubuntu Pro 18.04 LTS | libxmltok | no fix |
| Ubuntu Pro 18.04 LTS | swish-e | no fix |
| Ubuntu Pro 18.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 20.04 LTS | libxmltok | no fix |
| Ubuntu Pro 20.04 LTS | swish-e | no fix |
| Ubuntu Pro 20.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 22.04 LTS | libxmltok | no fix |
| Ubuntu Pro 22.04 LTS | swish-e | no fix |
| Ubuntu Pro 22.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 24.04 LTS | libxmltok | no fix |
| Ubuntu Pro 24.04 LTS | swish-e | no fix |
| Ubuntu Pro 24.04 LTS | xmlrpc-c | no fix |
| Ubuntu Pro 26.04 LTS | swish-e | no fix |
| openSUSE Leap 16.0 | MozillaFirefox | 153.5.0-160000.1.1 |
| openSUSE Leap 16.0 | expat | 2.8.4-160000.1.1 |
| openSUSE Tumbleweed | expat | 2.8.4-1.1 |