libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1229 advisory.

    libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are     required in the case of a large token for which multiple buffer fills are needed.

    Considering the tradeoff between the stability of Amazon Linux and the impact of CVE-2023-52425 a fix will     not be provided for firefox and thunderbird in Amazon Linux 2 at this time. (CVE-2023-52425)

    libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.

    Considering the tradeoff between the stability of Amazon Linux and the impact of CVE-2023-52426 a fix will     not be provided for firefox and thunderbird in Amazon Linux 2 at this time. (CVE-2023-52426)

    libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external     parsers (created via XML_ExternalEntityParserCreate). (CVE-2024-28757)

    A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity     expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat     can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could     lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the     environment and library usage. (CVE-2024-8176)

    libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small     document that is submitted for parsing. (CVE-2025-59375)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.
    (CVE-2023-52426)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile     time.(CVE-2023-52426)

    An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for     XML_ParseBuffer.(CVE-2024-45490)

    An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for     nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).(CVE-2024-45491)

    An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).(CVE-2024-45492)

Tenable has extracted the preceding description block directly from the EulerOS expat security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the expat package has been released.

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile     time.(CVE-2023-52426)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization expat security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of expat installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52426 advisory.

  - libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.
    (CVE-2023-52426)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile     time.(CVE-2023-52426)

Tenable has extracted the preceding description block directly from the EulerOS expat security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.
    (CVE-2023-52426)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-b8656bc059 advisory.

    Update to 2.6.0, fixes CVE-2023-52425, CVE-2023-52426.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fbe1f0c1aa advisory.

    Update to 2.6.0, fixes CVE-2023-52425, CVE-2023-52426.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-524 advisory.

    libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.
    (CVE-2023-52426)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of expat installed on the remote host is prior to 2.6.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-038-01 advisory.

  - libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are     required in the case of a large token for which multiple buffer fills are needed. (CVE-2023-52425)

  - libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.
    (CVE-2023-52426)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
271765	Amazon Linux 2023 : xmlrpc-c, xmlrpc-c-apps, xmlrpc-c-c++ (ALAS2023-2025-1229)	Nessus	Amazon Linux Local Security Checks	high
226493	Linux Distros Unpatched Vulnerability : CVE-2023-52426	Nessus	Misc.	medium
210701	EulerOS 2.0 SP9 : expat (EulerOS-SA-2024-2807)	Nessus	Huawei Local Security Checks	critical
210680	EulerOS 2.0 SP9 : expat (EulerOS-SA-2024-2827)	Nessus	Huawei Local Security Checks	critical
204549	Photon OS 4.0: Expat PHSA-2024-4.0-0581	Nessus	PhotonOS Local Security Checks	high
204460	Photon OS 5.0: Expat PHSA-2024-5.0-0216	Nessus	PhotonOS Local Security Checks	high
202680	EulerOS Virtualization 2.10.1 : expat (EulerOS-SA-2024-2000)	Nessus	Huawei Local Security Checks	medium
202675	EulerOS Virtualization 2.10.0 : expat (EulerOS-SA-2024-1982)	Nessus	Huawei Local Security Checks	medium
201708	CBL Mariner 2.0 Security Update: expat (CVE-2023-52426)	Nessus	MarinerOS Local Security Checks	medium
201154	EulerOS 2.0 SP12 : expat (EulerOS-SA-2024-1868)	Nessus	Huawei Local Security Checks	medium
201132	EulerOS 2.0 SP12 : expat (EulerOS-SA-2024-1854)	Nessus	Huawei Local Security Checks	medium
198323	EulerOS 2.0 SP11 : expat (EulerOS-SA-2024-1786)	Nessus	Huawei Local Security Checks	medium
198317	EulerOS 2.0 SP11 : expat (EulerOS-SA-2024-1798)	Nessus	Huawei Local Security Checks	medium
198096	EulerOS Virtualization 2.11.0 : expat (EulerOS-SA-2024-1725)	Nessus	Huawei Local Security Checks	medium
198095	EulerOS Virtualization 2.11.1 : expat (EulerOS-SA-2024-1714)	Nessus	Huawei Local Security Checks	medium
195243	EulerOS 2.0 SP10 : expat (EulerOS-SA-2024-1564)	Nessus	Huawei Local Security Checks	medium
195238	EulerOS 2.0 SP10 : expat (EulerOS-SA-2024-1586)	Nessus	Huawei Local Security Checks	medium
190966	Fedora 38 : mingw-expat (2024-b8656bc059)	Nessus	Fedora Local Security Checks	high
190963	Fedora 39 : mingw-expat (2024-fbe1f0c1aa)	Nessus	Fedora Local Security Checks	high
190739	Amazon Linux 2023 : expat, expat-devel, expat-static (ALAS2023-2024-524)	Nessus	Amazon Linux Local Security Checks	medium
190106	Slackware Linux 15.0 / current expat Multiple Vulnerabilities (SSA:2024-038-01)	Nessus	Slackware Local Security Checks	high

Detections

Analytics

CVE-2023-52426

medium

Tenable Plugins

high

medium

critical

critical

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

high

medium

high