Integer overflow in expat - CVE-2024-45492

Vulnerability identifier: #VU96899

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-45492

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow within the nextScaffoldPart() function in xmlparse.c. A remote attacker can pass specially crafted data to the application, trigger an integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

expat
Gentoo Linux
Oracle Linux
Debian Linux
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
IBM AIX
OpenBSD
Red Hat Enterprise Linux for IBM z Systems
Anolis OS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Ubuntu
Slackware Linux
SUSE Package Hub 15
Desktop Applications Module
Basesystem Module
openSUSE Leap
openEuler
Fedora
IBM Concert Software
IBM OmniFind Text Search Server for DB2 for i
Cryostat
IBM Security Guardium Key Lifecycle Manager (GKLM)
Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
Oracle Financial Services Behavior Detection Platform
Tenable Nessus
IBM Security Verify Governance
Oracle HTTP Server
Oracle Communications Network Analytics Data Director
Service Interconnect
IBM MQ Operator
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
App Connect Enterprise Certified Container
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
OpenShift Logging
IBM Observability with Instana
SmartFabric Storage Software
LANTIME Operating System Firmware (LTOS)
Precision 7920 Rack
Precision 7920 XL Rack
IBM VIOS
Communications Unified Assurance
Nessus Network Monitor
Red Hat OpenShift Container Platform
Oracle Outside In Technology
Nessus Agent
IBM Qradar SIEM
NetWorker Management Console
IBM OpenPages with Watson
IBM Engineering Requirements Management DOORS Next
Cloud Pak for Network Automation
OpenManage Network Integration (OMNI)
Enterprise SONiC
watsonx Assistant for IBM Cloud Pak for Data
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
watsonx Assistant Cartridge
IBM Business Automation Manager Open Editions
Juniper Junos Space
Oracle Communications Cloud Native Core Unified Data Repository
libexpat1 (Ubuntu package)
lib64expat1 (Ubuntu package)
expat (Ubuntu package)
xmlrpc-c
libexpat1-debuginfo-32bit
expat-debuginfo-32bit
libexpat1-32bit
libexpat1
libexpat1-debuginfo
expat
expat-debuginfo
libexpat-devel
expat-debugsource
expat-devel
expat (Red Hat package)
expat-help
libexpat1-64bit-debuginfo
expat-64bit-debuginfo
libexpat1-64bit
libexpat-devel-64bit
expat-32bit-debuginfo
libexpat-devel-32bit
libexpat1-32bit-debuginfo
expat (Debian package)
expat-static
expat-doc
mingw-expat
python3.8
python3
python3.9
python3.10
libmozjs-52-debuginfo
mozjs52-debuginfo
libmozjs-52
mozjs52
mozjs52-debugsource
mozjs52-devel
libmozjs-60-debuginfo
mozjs60-devel
mozjs60-debuginfo
mozjs60
libmozjs-60
mozjs60-debugsource
libmozjs-78-0-debuginfo
libmozjs-78-0
mozjs78-debuginfo
mozjs78
mozjs78-debugsource
mozjs78-devel
dev-qt/qtwebengine
mozjs115-debugsource
libmozjs-115-0
mozjs115-debuginfo
mozjs115-devel
libmozjs-115-0-debuginfo
mozjs115
Red Hat OpenShift GitOps
IBM QRadar Network Packet Capture
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Data Foundation (formerly OpenShift Container Storage)
IBM FileNet Content Manager
iDRAC9

Install updates from vendor's website.

expat - update to 2.6.3
IBM Concert Software - update to 1.0.3
SmartFabric Storage Software - update to 1.4.3
Communications Unified Assurance - update to 6.0.5
Nessus Network Monitor - update to 6.5.0
LANTIME Operating System Firmware (LTOS) - update to 7.08.016
IBM OpenPages with Watson - update to 9.1.2
IBM Engineering Requirements Management DOORS Next - update to 9.7.2.11
Nessus Agent - update to 10.7.3
Tenable Nessus - addressed in versions 10.7.6, 10.8.3
IBM Security Verify Governance - update to 10.0.2.0.5
Juniper Junos Space - update to 24.1R2
libexpat1 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.2.9-1ubuntu0.7, 2.4.7-1ubuntu0.4, 2.6.1-2ubuntu0.1
lib64expat1 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
expat (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.2.9-1ubuntu0.7, 2.4.7-1ubuntu0.4, 2.6.1-2ubuntu0.1
Service Interconnect - addressed in versions 1, 1.4
Red Hat OpenShift GitOps - addressed in versions 1.12.6, 1.13.2
xmlrpc-c - addressed in versions 1.60.04-1.fc42, 1.60.04-2.fc42
IBM MQ Operator - addressed in versions 2.0.28, 3.2.6, 3.3.0, 9.4.1.0-r1
libexpat1-debuginfo-32bit - update to 2.1.0-21.37.1
expat-debuginfo-32bit - update to 2.1.0-21.37.1
libexpat1-32bit - addressed in versions 2.1.0-21.37.1, 2.4.4-150400.3.22.1
libexpat1 - addressed in versions 2.1.0-21.37.1, 2.2.5-150000.3.30.1, 2.4.4-150400.3.22.1
libexpat1-debuginfo - addressed in versions 2.1.0-21.37.1, 2.2.5-150000.3.30.1, 2.4.4-150400.3.22.1
expat - addressed in versions 2.1.0-21.37.1, 2.4.4-150400.3.22.1
expat-debuginfo - addressed in versions 2.1.0-21.37.1, 2.2.5-150000.3.30.1, 2.4.4-150400.3.22.1
libexpat-devel - addressed in versions 2.1.0-21.37.1, 2.4.4-150400.3.22.1
expat-debugsource - addressed in versions 2.1.0-21.37.1, 2.2.5-150000.3.30.1, 2.4.4-150400.3.22.1
expat-devel - addressed in versions 2.2.5-13.0.1, 2.5.0-4
expat - addressed in versions 2.2.5-13.0.1, 2.5.0-4
expat (Red Hat package) - addressed in versions 2.2.5-15.el8_10, 2.5.0-2.el9_4.1
Multicluster Engine for Kubernetes - addressed in versions 2.3.8, 2.4.6, 2.6.3
expat-help - update to 2.4.1-13
expat - update to 2.4.1-13
expat-debuginfo - update to 2.4.1-13
expat-debugsource - update to 2.4.1-13
expat-devel - update to 2.4.1-13
libexpat1-64bit-debuginfo - update to 2.4.4-150400.3.22.1
expat-64bit-debuginfo - update to 2.4.4-150400.3.22.1
libexpat1-64bit - update to 2.4.4-150400.3.22.1
libexpat-devel-64bit - update to 2.4.4-150400.3.22.1
expat-32bit-debuginfo - update to 2.4.4-150400.3.22.1
libexpat-devel-32bit - update to 2.4.4-150400.3.22.1
libexpat1-32bit-debuginfo - update to 2.4.4-150400.3.22.1
OpenShift Service Mesh - addressed in versions 2.4.11, 2.5.5, 2.5.6, 2.6.2
expat (Debian package) - update to 2.5.0-1+deb12u1
expat-static - update to 2.5.0-4
expat-doc - update to 2.5.0-4
expat - update to 2.6.3
mingw-expat - addressed in versions 2.6.3-1.fc39, 2.6.3-1.fc40, 2.6.3-1.fc41
expat - addressed in versions 2.6.3-1.fc39, 2.6.3-1.fc40, 2.6.3-1.fc41
Cloud Pak for Network Automation - update to 2.7.7
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.9.5, 2.11.3, 2.12.0
OpenManage Network Integration (OMNI) - update to 3.7
python3.8 - addressed in versions 3.8.20-1.fc39, 3.8.20-1.fc40, 3.8.20-1.fc41
python3 - update to 3.9.20
python3.9 - addressed in versions 3.9.20-1.fc39, 3.9.20-1.fc40, 3.9.20-1.fc41
python3.10 - addressed in versions 3.10.15-1.fc39, 3.10.15-1.fc40, 3.10.15-1.fc41
Enterprise SONiC - update to 4.4.1
Red Hat Advanced Cluster Security for Kubernetes - addressed in versions 4.4.6, 4.5.3
watsonx Assistant for IBM Cloud Pak for Data - update to 4.8.8
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.13.12, 4.14.11, 4.16.3
Red Hat OpenShift Container Platform - addressed in versions 4.13.52, 4.14.38, 4.15.35, 4.16.15, 4.16.16, 4.17.0, 4.17.1, 4.17.5
App Connect Enterprise Certified Container - addressed in versions 5.0.22, 12.0.6, 12.6.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.1
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component - update to 5.1.1
watsonx Assistant Cartridge - update to 5.1.1
IBM FileNet Content Manager - addressed in versions 5.5.8.0 IF009, 5.5.12.0 IF004, 5.6.0.0 IF002
OpenShift Logging - addressed in versions 5.6.24, 5.6.25, 5.8.13, 5.8.14, 5.9.7, 5.9.8, 6.0.1
iDRAC9 - addressed in versions 7.00.00.181, 7.20.30.50
Precision 7920 Rack - update to 7.00.00.181
Precision 7920 XL Rack - update to 7.00.00.181
IBM Qradar SIEM - update to 7.5.0 Update Pack 10 IF01
IBM QRadar Network Packet Capture - update to 7.5.0 Update Package 11
IBM Business Automation Manager Open Editions - update to 8.0.6
NetWorker Management Console - update to 19.12.0.1
libmozjs-52-debuginfo - update to 52.6.0-150000.3.9.1
mozjs52-debuginfo - update to 52.6.0-150000.3.9.1
libmozjs-52 - update to 52.6.0-150000.3.9.1
mozjs52 - update to 52.6.0-150000.3.9.1
mozjs52-debugsource - update to 52.6.0-150000.3.9.1
mozjs52-devel - update to 52.6.0-150000.3.9.1
libmozjs-60-debuginfo - update to 60.9.0-150200.6.8.1
mozjs60-devel - update to 60.9.0-150200.6.8.1
mozjs60-debuginfo - update to 60.9.0-150200.6.8.1
mozjs60 - update to 60.9.0-150200.6.8.1
libmozjs-60 - update to 60.9.0-150200.6.8.1
mozjs60-debugsource - update to 60.9.0-150200.6.8.1
libmozjs-78-0-debuginfo - update to 78.15.0-150400.3.6.2
libmozjs-78-0 - update to 78.15.0-150400.3.6.2
mozjs78-debuginfo - update to 78.15.0-150400.3.6.2
mozjs78 - update to 78.15.0-150400.3.6.2
mozjs78-debugsource - update to 78.15.0-150400.3.6.2
mozjs78-devel - update to 78.15.0-150400.3.6.2
dev-qt/qtwebengine - update to 103.0.5060.53
mozjs115-debugsource - update to 115.4.0-150600.3.3.1
libmozjs-115-0 - update to 115.4.0-150600.3.3.1
mozjs115-debuginfo - update to 115.4.0-150600.3.3.1
mozjs115-devel - update to 115.4.0-150600.3.3.1
libmozjs-115-0-debuginfo - update to 115.4.0-150600.3.3.1
mozjs115 - update to 115.4.0-150600.3.3.1
IBM Observability with Instana - update to 284

• https://github.com/libexpat/libexpat/pull/892
• https://github.com/libexpat/libexpat/issues/889

• Slackware Linux update for expat
• Fedora 41 update for expat
• Fedora 40 update for expat
• Fedora 39 update for expat
• Fedora 39 update for mingw-expat
• Fedora 40 update for mingw-expat
• Fedora 41 update for mingw-expat
• Slackware Linux update for python3
• SUSE update for expat
• Fedora 41 update for python3.10
• Fedora 40 update for python3.10
• Fedora 39 update for python3.10
• Multiple vulnerabilities in Nessus Agent
• Tenable Nessus update for third-party components
• Fedora 41 update for python3.9
• Fedora 40 update for python3.9
• Fedora 39 update for python3.9
• Fedora 39 update for python3.8
• Fedora 41 update for python3.8
• Fedora 40 update for python3.8
• Ubuntu update for expat
• SUSE update for expat
• openEuler update for expat
• OpenBSD update for libexpat
• Ubuntu update for expat
• Debian update for expat
• Red Hat Enterprise Linux 9 update for expat
• Red Hat Enterprise Linux 8 update for expat
• Multiple vulnerabilities in Nessus Network Monitor
• Multiple vulnerabilities in Service Interconnect 1
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.5
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• SUSE update for expat
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.14
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.13
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.6
• SUSE update for mozjs115
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in OpenShift Logging 5.9
• Multiple vulnerabilities in OpenShift Service Mesh 2.4
• Multiple vulnerabilities in OpenShift Service Mesh 2.5
• Multiple vulnerabilities in OpenShift Service Mesh 2.6
• Multiple vulnerabilities in Red Hat build of Cryostat 3 on RHEL 8
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• SUSE update for mozjs78
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.11
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.16
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Unified Data Repository
• Multiple vulnerabilities in Communications Unified Assurance
• Multiple vulnerabilities in Oracle Outside In Technology
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in OpenShift Logging 5.9
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in OpenShift Logging 6.0
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.9
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.13
• Multiple vulnerabilities in IBM MQ Operator
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Observability with Instana
• Multiple vulnerabilities in IBM AIX and IBM VIOS
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.4
• Multiple vulnerabilities in OpenShift Service Mesh 2.5
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Service Interconnect 1
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.3
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• Multiple vulnerabilities in IBM Concert Software
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data update for libexpat
• Multiple vulnerabilities in Service Interconnect
• Multiple vulnerabilities in Enterprise SONiC Distribution
• Fedora 42 update for xmlrpc-c
• Fedora 42 update for xmlrpc-c
• Multiple vulnerabilities in Junos Space
• Multiple vulnerabilities in Dell OpenManage Network Integration (OMNI)
• Multiple vulnerabilities in Oracle Communications Network Analytics Data Director
• Multiple vulnerabilities in Oracle HTTP Server
• Gentoo update for QtWebEngine
• Multiple vulnerabilities in Oracle Financial Services Behavior Detection Platform
• Multiple vulnerabilities in Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
• Multiple vulnerabilities in IBM QRadar Network Packet Capture
• Multiple vulnerabilities in IBM watsonx Assistant for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM FileNet Content Manager (FNCM) Content Based Retrieval (CBR) content indexing
• Multiple vulnerabilities in libexpat
• Multiple vulnerabilities in IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
• Anolis OS update for expat
• Dell SmartFabric Storage Software update for third-party components
• Meinberg LANTIME firmware update for third-party components (October 2024)
• Dell NetWorker Management Console update for third-party components
• Multiple vulnerabilities in Dell iDRAC9
• Multiple vulnerabilities in Dell Precision Rack
• Multiple vulnerabilities in IBM Security Verify Governance
• Multiple vulnerabilities in IBM Security Guardium Key Lifecycle Manager
• Anolis OS update for expat
• Multiple vulnerabilities in IBM OpenPages
• Multiple vulnerabilities in IBM OmniFind Text Search Server for DB2 for i
• SUSE update for mozjs52
• SUSE update for mozjs60
• Multiple vulnerabilities in IBM Engineering Requirements Management DOORS and DOORS Web Access