Resource exhaustion in expat - CVE-2023-52425

Vulnerability identifier: #VU86230

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2023-52425

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

Affected software:
expat
IBM Application Gateway
JBoss Core Services
IBM VIOS
AMQ Broker
Oracle Linux
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Linux Micro
SUSE Enterprise Storage
IBM AIX
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Web and Scripting Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Workstation Extension 12
Slackware Linux
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Public Cloud Module
Basesystem Module
Python 3 Module
Development Tools Module
openSUSE Leap
openEuler
Ubuntu
Fedora
IBM Rational ClearCase
IBM Rational ClearQuest
IBM Business Automation Workflow
Data Lakehouse
Consul
Consul Enterprise
Cryostat
IBM MQ Operator
Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
Oracle Financial Services Behavior Detection Platform
WebSphere Remote Server
Oracle HTTP Server
Oracle Communications Network Analytics Data Director
Oracle Communications Cloud Native Core Automated Test Suite
Oracle Communications Cloud Native Core Binding Support Function
Run Once Duration Override Operator for Red Hat OpenShift
Ansible Automation Platform
Red Hat Advanced Cluster Management for Kubernetes
IBM Cloud Transformation Advisor
Red Hat OpenShift Dev Spaces
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Kube Descheduler Operator for Red Hat OpenShift
App Connect Enterprise Certified Container
IBM Tivoli Monitoring
Red Hat Migration Toolkit for Applications
IBM Power Hardware Management Console (HMC)
PowerProtect Data Manager
Cognos Dashboards on Cloud Pak for Data
Telemetry Dashboard
Storage Defender - Resiliency Service
Liquidware
SmartFabric OS10
Citrix Workspace App
Webex App VDI
PowerVault ME5
PowerStore X
OpenManage Network Integration (OMNI)
PowerStore T
Enterprise SONiC
IBM Cloud Pak for Watson AIOps
Storage Resource Manager
Security Verify Governance - Identity Manager virtual appliance
EMC Cloud Tiering Appliance
OpenShift API for Data Protection (OADP)
SmartFabric Storage Software
LANTIME Operating System Firmware (LTOS)
BIG-IP
PowerScale OneFS
Migration Toolkit for Containers
VMware Horizon Client
IBM Tivoli Network Manager (ITNM)
Red Hat OpenShift Container Platform
Red Hat OpenShift GitOps
OpenShift Service Mesh
OpenShift Virtualization
IBM Supplied MQ Advanced Queue Manager Container images
RecoverPoint for Virtual Machines
IBM Qradar SIEM
Oracle Outside In Technology
NetWorker Management Console
Juniper Secure Analytics (JSA)
Dell EMC NetWorker vProxy
Red Hat Single Sign-On
MySQL Cluster
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
xmlrpc-c-client
xmlrpc-c-client++
xmlrpc-c-c++
xmlrpc-c
xmlrpc-c-devel
xmlrpc-c-doc
libexpat-devel
libexpat1-debuginfo-32bit
expat-debuginfo-32bit
libexpat1-32bit
libexpat1
expat-debuginfo
expat-debugsource
libexpat1-debuginfo
expat
expat (Red Hat package)
expat-devel
expat-help
libexpat-devel-64bit
libexpat1-32bit-debuginfo
libexpat-devel-32bit
expat-32bit-debuginfo
expat-64bit-debuginfo
libexpat1-64bit-debuginfo
libexpat1-64bit
libexpat1 (Ubuntu package)
expat (Ubuntu package)
expat-doc
expat-static
mingw-expat
python-doc
python
python-demo
python-gdbm-debuginfo
libpython2_7-1_0-debuginfo
python-tk-debuginfo
python-tk
python-idle
python-gdbm
python-curses
python-curses-debuginfo
python-base
python-debuginfo
libpython2_7-1_0
python-debugsource
python-base-debugsource
python-base-debuginfo
python-devel
python-xml-debuginfo
python-xml
python-base-32bit
python-base-debuginfo-32bit
libpython2_7-1_0-32bit
python-debuginfo-32bit
libpython2_7-1_0-debuginfo-32bit
python-32bit
python-doc-pdf
python3-debugsource
python3
python3-dbm-debuginfo
python3-devel
python3-dbm
python3-devel-debuginfo
python3-curses-debuginfo
python3-tk
python3-tk-debuginfo
python3-base-debuginfo-32bit
libpython3_4m1_0-debuginfo-32bit
libpython3_4m1_0-32bit
libpython3_4m1_0-debuginfo
libpython3_4m1_0
python3-base-debuginfo
python3-debuginfo
python3-base-debugsource
python3-base
python3-curses
python36
python36-devel
python36-base
libpython3_6m1_0-debuginfo
libpython3_6m1_0-32bit
libpython3_6m1_0-debuginfo-32bit
python36-debugsource
python36-base-debuginfo
python36-debuginfo
libpython3_6m1_0
python3-idle
python3-tools
python3-core-debugsource
python3-doc-devhelp
python3-testsuite
python3-testsuite-debuginfo
python3-doc
libpython3_6m1_0-64bit-debuginfo
libpython3_6m1_0-64bit
libpython3_6m1_0-32bit-debuginfo
python310-doc-devhelp
python310-64bit-debuginfo
python310-base-64bit-debuginfo
python310-idle
python310-tk
python310-tk-debuginfo
python310-base-64bit
python310-curses-debuginfo
python310-debuginfo
python310-curses
libpython3_10-1_0-64bit-debuginfo
python310-64bit
libpython3_10-1_0-64bit
libpython3_10-1_0-debuginfo
python310-tools
python310-dbm
python310-debugsource
python310-base-debuginfo
python310-devel
python310-base-32bit
python310-base-32bit-debuginfo
libpython3_10-1_0
python310-32bit
libpython3_10-1_0-32bit
libpython3_10-1_0-32bit-debuginfo
python310-32bit-debuginfo
python310-base
python310-core-debugsource
python310
python310-doc
python310-testsuite
python310-testsuite-debuginfo
python310-dbm-debuginfo
python311-doc-devhelp
python311-debugsource
python311-doc
python311-dbm-debuginfo
python311-base-debuginfo
libpython3_11-1_0-debuginfo
python311-curses-debuginfo
libpython3_11-1_0
python311-debuginfo
python311-dbm
python311-tk
python311-idle
python311
python311-tools
python311-testsuite
python311-tk-debuginfo
python311-curses
python311-base
libpython3_11-1_0-32bit-debuginfo
python311-base-32bit
python311-32bit-debuginfo
python311-32bit
libpython3_11-1_0-32bit
python311-base-32bit-debuginfo
python311-testsuite-debuginfo
python311-64bit-debuginfo
python311-base-64bit
libpython3_11-1_0-64bit-debuginfo
python311-base-64bit-debuginfo
python311-64bit
python311-devel
libpython3_11-1_0-64bit
python311-core-debugsource
Cisco Jabber
BIG-IP DNS
Dell EMC VxRail Appliance
Oracle Communications Cloud Native Core Service Communication Proxy
Oracle Communications Cloud Native Core Policy
Oracle Communications Cloud Native Core Security Edge Protection Proxy
Cisco Webex Meetings
HPE NonStop Virtual Tape Repository (VTR)
Dell EMC Storage Monitoring and Reporting (SMR)
IBM FileNet Content Manager
IBM HTTP Server

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources when parsing large tokens. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

Install updates from vendor's website.

• https://github.com/libexpat/libexpat/pull/789