CVE-2026-41080

Опубликовано: 16 апр. 2026

Источник: nvd

CVSS3: 2.9

CVSS3: 7.5

EPSS Низкий

Описание

libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

Ссылки

https://blog.hartwork.org/posts/expat-2-8-0-released/
Release Notes
https://github.com/libexpat/libexpat/issues/47
Issue Tracking
https://github.com/libexpat/libexpat/pull/1183
Issue Tracking
Patch
https://www.openwall.com/lists/oss-security/2026/04/26/1
Mailing List
http://www.openwall.com/lists/oss-security/2026/04/26/1
Mailing List
https://cert-portal.siemens.com/productcert/html/ssa-082556.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*

Версия до 2.8.0 (исключая)

EPSS

Процентиль: 33%

0.00398

Низкий

2.9 Low

CVSS3

7.5 High

CVSS3

Дефекты

CWE-331

Связанные уязвимости

CVE-2026-41080

CVSS3: 2.9

ubuntu

4 месяца назад

libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

CVE-2026-41080

CVSS3: 3.7

redhat

4 месяца назад

libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

CVE-2026-41080

msrc

3 месяца назад

Описание отсутствует

CVE-2026-41080

CVSS3: 2.9

debian

4 месяца назад

libexpat before 2.8.0 uses insufficient entropy, and thus hash floodin ...

GHSA-fpqv-cr66-h6pc

CVSS3: 2.9

github

4 месяца назад

libexpat before 2.7.6 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

EPSS

Процентиль: 33%

0.00398

Низкий

2.9 Low

CVSS3

7.5 High

CVSS3

Дефекты

CWE-331