REDHAT-BUG-2308617: Integer Overflow
Published Aug 30, 2024
·Updated
An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms (where UINTMAX equals SIZEMAX).
Affected Software
1 affected component
Libexpat expat<2.6.3
Event History
Aug 30, 2024
Data Sourced
via Red Hat·03:20 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2308617?
The vulnerability REDHAT-BUG-2308617 is considered to have a high severity due to the potential for integer overflow leading to memory corruption.
2
How do I fix REDHAT-BUG-2308617?
To mitigate the issue described in REDHAT-BUG-2308617, upgrade libexpat to version 2.6.3 or later.
3
What platforms are affected by REDHAT-BUG-2308617?
REDHAT-BUG-2308617 affects 32-bit platforms where UINT_MAX equals SIZE_MAX.
4
What version of libexpat is vulnerable in REDHAT-BUG-2308617?
Libexpat versions prior to 2.6.3 are vulnerable as indicated in REDHAT-BUG-2308617.
5
What functionality is impacted by REDHAT-BUG-2308617?
The function nextScaffoldPart in xmlparse.c can be impacted by integer overflow vulnerabilities due to the m_groupSize variable.