ALPINE-CVE-2024-28757
ALPINE-CVE-2024-28757
This page contains facts from public vulnerability sources. Check the original advisory before updating.
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
CVSS 7.5 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
expat Alpine:v3.16
- Affected ranges
- ECOSYSTEM: < 2.6.2-r0
Update to 2.6.2-r0
expat Alpine:v3.17
- Affected ranges
- ECOSYSTEM: < 2.6.2-r0
Update to 2.6.2-r0
expat Alpine:v3.18
- Affected ranges
- ECOSYSTEM: < 2.6.2-r0
Update to 2.6.2-r0
expat Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 2.6.2-r0
Update to 2.6.2-r0
expat Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 2.6.2-r0
Update to 2.6.2-r0
expat Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 2.6.2-r0
Update to 2.6.2-r0
expat Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 2.6.2-r0
Update to 2.6.2-r0
expat Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 2.6.2-r0
Update to 2.6.2-r0
expat Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 2.6.2-r0
Update to 2.6.2-r0