ALPINE-CVE-2024-45491
ALPINE-CVE-2024-45491
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).
CVSS 9.8 · Critical · Fix available
- Published
- Updated
Stack: system
Affected products and versions
expat Alpine:v3.17
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.18
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0