USN-7424-1: Expat vulnerability
It was discovered that Expat could crash due to stack overflow when processing XML documents with deeply nested entity references. If a user or automated system were tricked into processing specially crafted XML input, an attacker could use this issue to cause a denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7424-1?
The vulnerability USN-7424-1 has a high severity as it can lead to a denial of service through stack overflow.
How do I fix USN-7424-1?
To fix USN-7424-1, update the expat and libexpat1 packages to their respective patched versions for your Ubuntu release.
Who is affected by USN-7424-1?
USN-7424-1 affects users of Ubuntu 22.04, 24.04, and 24.10 with specific versions of the expat and libexpat1 packages.
What causes the vulnerability USN-7424-1?
The vulnerability USN-7424-1 is caused by a stack overflow that occurs when processing deeply nested entity references in XML documents.
Can USN-7424-1 be exploited remotely?
Yes, USN-7424-1 can be exploited remotely if a user or automated system is tricked into processing specially crafted XML input.