ALPINE-CVE-2024-45492
ALPINE-CVE-2024-45492
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).
CVSS 9.8 · Critical · Fix available
- Published
- Updated
Stack: system
Affected products and versions
expat Alpine:v3.17
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.18
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0
expat Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 2.6.3-r0
Update to 2.6.3-r0