PT-2024-10120
CVE-2024-50602
·
تاريخ النشر
2024-10-27
·
تاريخ التحديث
2026-09-18
الوصف من
CVSS 3.1
5.9
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
libexpat versions prior to 2.6.4
Description
The issue is related to the
XML ResumeParser function in the libexpat library, which can cause a crash due to insufficient checking of unusual or exceptional states. This can be exploited by a remote attacker to cause a denial of service. The XML StopParser function can stop or suspend an unstarted parser, leading to the crash.Recommendations
For libexpat versions prior to 2.6.4, update to version 2.6.4 or later to resolve the issue. As a temporary workaround, consider disabling the
XML ResumeParser function until a patch is available. Restrict access to the XML StopParser function to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾