CVE-2024-45492: Integer Overflow

Q: What is the severity of CVE-2024-45492?

CVE-2024-45492 is classified with a severity that indicates a significant risk due to the integer overflow vulnerability in libexpat.

Q: How do I fix CVE-2024-45492?

To fix CVE-2024-45492, upgrade libexpat to version 2.6.3 or later.

Q: Which versions of libexpat are affected by CVE-2024-45492?

CVE-2024-45492 affects all versions of libexpat prior to 2.6.3.

Q: Is CVE-2024-45492 exploited in the wild?

As of now, there is no public information available indicating that CVE-2024-45492 is actively being exploited in the wild.

Q: What types of systems are vulnerable to CVE-2024-45492?

CVE-2024-45492 primarily affects 32-bit platforms due to the integer overflow issue in libexpat.

Published Aug 30, 2024

Updated

An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms (where UINTMAX equals SIZEMAX).

Other sources

libexpat could allow a local attacker to execute arbitrary code on the system, caused by an integer overflow in the nextScaffoldPart function in xmlparse.c. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

— IBM

Affected Software

29 affected componentsFixes available

IBM Concert Software<=1.0.0, 1.0.1, 1.0.2, 1.0.2.1

Microsoft cbl2 expat 2.6.2-2

Patch available

Microsoft cbl2 expat 2.6.2-2

Patch available

Microsoft azl3 expat 2.6.2-1

Patch available

Microsoft cbl2 expat 2.6.3-1

Patch available

Microsoft azl3 expat 2.6.3-1

Patch available

Libexpat Project Libexpat<2.6.3

debian/expat<2.5.0-1+deb12u1

2.5.0-1+deb12u1

debian/expat<2.6.2-2

2.6.2-2

debian/expat<2.6.2-2

2.6.2-2

debian/libxmltok*

alpine/expat<2.6.3-r0

2.6.3-r0

alpine/expat<2.6.3-r0

2.6.3-r0

alpine/expat<2.6.3-r0

2.6.3-r0

alpine/expat<2.6.3-r0

2.6.3-r0

alpine/expat<2.6.3-r0

2.6.3-r0

alpine/expat<2.6.3-r0

2.6.3-r0

alpine/expat<2.6.3-r0

2.6.3-r0

alpine/expat<2.6.3-r0

2.6.3-r0

alpine/qt5-qtwebengine<5.15.16-r12

5.15.16-r12

alpine/qt5-qtwebengine<5.15.17-r3

5.15.17-r3

alpine/qt5-qtwebengine<5.15.17-r3

5.15.17-r3

alpine/qt5-qtwebengine<5.15.17-r3

5.15.17-r3

alpine/qt6-qtwebengine<6.7.2-r6

6.7.2-r6

alpine/qt6-qtwebengine<6.7.2-r6

6.7.2-r6

alpine/qt6-qtwebengine<6.7.2-r6

6.7.2-r6

alpine/qt6-qtwebengine<6.7.2-r6

6.7.2-r6

debian/expat

2.5.0-1+deb12u22.5.0-1+deb12u52.8.3-1~deb13u12.9.0-1~deb13u12.9.0-12.10.0-1

debian/libxmltok<=1.2-4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/expat to a version that resolves this vulnerability.
Fixed in 2.5.0-1+deb12u1
Upgrade
Upgrade debian/expat to a version that resolves this vulnerability.
Fixed in 2.6.2-2
Upgrade
Upgrade alpine/expat to a version that resolves this vulnerability.
Fixed in 2.6.3-r0
Upgrade
Upgrade alpine/qt5-qtwebengine to a version that resolves this vulnerability.
Fixed in 5.15.16-r12
Upgrade
Upgrade alpine/qt5-qtwebengine to a version that resolves this vulnerability.
Fixed in 5.15.17-r3
Upgrade
Upgrade alpine/qt6-qtwebengine to a version that resolves this vulnerability.
Fixed in 6.7.2-r6
Upgrade
Upgrade debian/expat to a version that resolves this vulnerability.
Fixed in 2.5.0-1+deb12u2Fixed in 2.5.0-1+deb12u5Fixed in 2.8.3-1~deb13u1Fixed in 2.9.0-1~deb13u1Fixed in 2.9.0-1Fixed in 2.10.0-1
Upgrade
Upgrade libexpat to a version that resolves this vulnerability.
Fixed in 2.6.3

Event History

Aug 30, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Data Sourced

via OSV·03:15 AM

DescriptionSeverityAffected Software

Data Sourced

via Red Hat·03:20 AM

DescriptionSeverityAffected Software

Sep 13, 2024

Data Sourced

via Microsoft·07:00 AM

DescriptionSeverityWeaknessAffected Software

Nov 19, 2024

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Jan 23, 2025

News Published

via The Register·01:06 AM

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2024-45492?

CVE-2024-45492 is classified with a severity that indicates a significant risk due to the integer overflow vulnerability in libexpat.

How do I fix CVE-2024-45492?

To fix CVE-2024-45492, upgrade libexpat to version 2.6.3 or later.

Which versions of libexpat are affected by CVE-2024-45492?

CVE-2024-45492 affects all versions of libexpat prior to 2.6.3.

Is CVE-2024-45492 exploited in the wild?

As of now, there is no public information available indicating that CVE-2024-45492 is actively being exploited in the wild.

What types of systems are vulnerable to CVE-2024-45492?

CVE-2024-45492 primarily affects 32-bit platforms due to the integer overflow issue in libexpat.

CVE-2024-45492: Integer Overflow

Other sources

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-45492?

How do I fix CVE-2024-45492?

Which versions of libexpat are affected by CVE-2024-45492?

Is CVE-2024-45492 exploited in the wild?

What types of systems are vulnerable to CVE-2024-45492?

Company

Resources

Contact