Detections
Analytics
Alpine: libexpat, multiple expat packages: security update to 2.10.0-r0
high Tenable Cloud Security Plugin ID 478182
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the
direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so
later documents on the same reset parser fail with XML_ERROR_NO_MEMORY until it is recreated.
(CVE-2026-113351)
- libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in
accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can supply a
moderately sized XML document with a large DTD and nested entity expansions to consume tens of seconds of
CPU per parse. (CVE-2026-115506)
- libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2()
in lib/xmlparse.c that mishandles the XML_TOK_NONE token from empty input. Attackers who control stream
chunking can force an empty non-final first parse on an external entity subparser, causing a later parse
to crash the application. (CVE-2026-117610)
- libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c
that allows attackers to trigger out-of-bounds writes via oversized attribute counts. Attackers can supply
a multi-gigabyte document with a start tag carrying over 2^30 attributes to overflow attIndex and
nPrefixes, crashing applications or corrupting heap memory. (CVE-2026-118370)
Solution
Update the expat library and its related packages to version 2.10.0-r0 or later.See Also
https://security.alpinelinux.org/vuln/CVE-2026-113351
https://security.alpinelinux.org/vuln/CVE-2026-115506
Plugin Details
Severity: High
ID: 478182
Version: Revision 1.1
Type: Local
Published: 11/2/2026
Updated: 11/2/2026
Supported Sensors: Agentless Assessment
Risk Information
VPR
Risk Factor: Low
Score: 3.5
Percentile: 51.3
CVSS v2
Risk Factor: High
Base Score: 8.5
Temporal Score: 6.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:C
CVSS Score Source: CVE-2026-118370
CVSS v3
Risk Factor: High
Base Score: 8.2
Temporal Score: 7.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: High
Base Score: 8.7
Threat Score: 6.6
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS Score Source: CVE-2026-115506
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 10/20/2026
Reference Information
CVE: CVE-2026-113351, CVE-2026-115506, CVE-2026-117610, CVE-2026-118370