First published: Thu Mar 14 2024(Updated: )
It was discovered that Expat could be made to consume large amounts of resources. If a user or automated system were tricked into processing specially crafted input, an attacker could possibly use this issue to cause a denial of service. (CVE-2023-52425, CVE-2024-28757)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/expat | <2.5.0-2ubuntu0.1 | 2.5.0-2ubuntu0.1 |
Ubuntu | =23.10 | |
All of | ||
ubuntu/libexpat1 | <2.5.0-2ubuntu0.1 | 2.5.0-2ubuntu0.1 |
Ubuntu | =23.10 | |
All of | ||
ubuntu/expat | <2.4.7-1ubuntu0.3 | 2.4.7-1ubuntu0.3 |
Ubuntu | =22.04 | |
All of | ||
ubuntu/libexpat1 | <2.4.7-1ubuntu0.3 | 2.4.7-1ubuntu0.3 |
Ubuntu | =22.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of USN-6694-1 is classified as a denial of service vulnerability.
USN-6694-1 affects Expat versions prior to 2.5.0-2ubuntu0.1 and 2.4.7-1ubuntu0.3 on Ubuntu 22.04 and 23.10.
To fix USN-6694-1, you should upgrade to Expat version 2.5.0-2ubuntu0.1 or 2.4.7-1ubuntu0.3, depending on your Ubuntu version.
USN-6694-1 addresses vulnerabilities identified by CVE-2023-52425 and CVE-2024-28757.
Exploiting USN-6694-1 could potentially lead to a denial of service, consuming large amounts of resources.