All products

Red Hat Enterprise Linux 7/expat

Red Hat · Package
40 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
expat: expat: Denial of Service via NULL pointer dereference in external entity parsingCVE-2026-117610 Red Hat Enterprise Linux 10/expatRed Hat Enterprise Linux 10/firefox Red Hat Medium No fix reported
expat: expat: Denial of Service via integer overflow during XML attribute parsingCVE-2026-118370 Red Hat Enterprise Linux 10/expatRed Hat Enterprise Linux 10/firefox Red Hat Medium No fix reported
expat: external entity expansionCVE-2013-0341 Red Hat Enterprise Linux 5/expatRed Hat Enterprise Linux 6/expat Red Hat Medium No fix reported
expat: internal entity expansionCVE-2013-0340 Red Hat Enterprise Linux 5/expatRed Hat Enterprise Linux 6/expat Red Hat Medium No fix reported
expat: Using XML_Parse before rand() results into non-random outputCVE-2012-6702 Red Hat Enterprise Linux 5/expatRed Hat Enterprise Linux 5/xmlrpc-c Red Hat Medium No fix reported
expat: Undefined behavior and pointer overflowsCVE-2016-4472 Red Hat Enterprise Linux 5/expatRed Hat Enterprise Linux 5/firefox Red Hat Medium No fix reported
expat: Little entropy used for hash initializationCVE-2016-5300 Red Hat Enterprise Linux 5/expatRed Hat Enterprise Linux 5/xmlrpc-c Red Hat Medium No fix reported
firefox: Possible integer overflow to fix inside XML_Parse in ExpatCVE-2016-9063 Red Hat Enterprise Linux 5/expatRed Hat Enterprise Linux 6/compat-expat1 Red Hat Low No fix reported
expat: Inifinite loop due to invalid XML in external entityCVE-2017-9233 Red Hat Enterprise Linux 5/expatRed Hat Enterprise Linux 5/firefox Red Hat Medium No fix reported
expat: integer overflow in the doProlog functionCVE-2022-23990 Red Hat Enterprise Linux 6/compat-expat1Red Hat Enterprise Linux 6/expat Red Hat Medium No fix reported
expat: Stack exhaustion in doctype parsingCVE-2022-25313 Red Hat Enterprise Linux 6/expatRed Hat Enterprise Linux 7/expat Red Hat Medium No fix reported
expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreateCVE-2022-43680 Red Hat Enterprise Linux 6/compat-expat1Red Hat Enterprise Linux 6/expat Red Hat Medium No fix reported
expat: recursive XML entity expansion vulnerabilityCVE-2023-52426 Red Hat Enterprise Linux 6/expatRed Hat Enterprise Linux 7/expat Red Hat Medium No fix reported
expat: parsing large tokens can trigger a denial of serviceCVE-2023-52425 Red Hat Enterprise Linux 6/expatRed Hat Enterprise Linux 7/expat Red Hat Medium No fix reported
libexpat: integer overflowCVE-2024-45492 Red Hat Enterprise Linux 6/compat-expat1Red Hat Enterprise Linux 6/expat Red Hat Medium No fix reported
libexpat: Integer Overflow or WraparoundCVE-2024-45491 Red Hat Enterprise Linux 6/compat-expat1Red Hat Enterprise Linux 6/expat Red Hat Medium No fix reported
libexpat: Negative Length Parsing Vulnerability in libexpatCVE-2024-45490 Red Hat Enterprise Linux 10/expatRed Hat Enterprise Linux 6/compat-expat1 Red Hat Medium No fix reported
libexpat: expat: DoS via XML_ResumeParserCVE-2024-50602 Red Hat Enterprise Linux 7/expatRed Hat Enterprise Linux 8/mingw-expat Red Hat Medium No fix reported
libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpatCVE-2024-8176 Red Hat Enterprise Linux 6/compat-expat1Red Hat Enterprise Linux 6/expat Red Hat Medium No fix reported
libexpat: libexpat: Denial of service via crafted file processingCVE-2025-66382 Red Hat Enterprise Linux 10/expatRed Hat Enterprise Linux 10/firefox Red Hat Low No fix reported