« List of all CVEs

CVE-2024-45490

Published: 8/30/2024 Last updated: 7/14/2026 Reserved: 8/30/2024

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 9.8 Critical CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Opam packages affected (4)

conf-expat conf-gtk2 conf-gtk3 ocaml-expat

Products affected (2)

Product Vendor Version
n/a n/a < publication
n/a n/a Puppet Enterprise prior to 2019.8.9, Puppet Enterprise prior to 2021.4, Puppet Server prior to 6.17.1, Puppet Server prior to 7.4.2, Puppet Agent prior to 6.25.1, Puppet Agent prior to 7.12.1

References (22)