CVE-2026-24515

Опубликовано: 23 янв. 2026

Источник: ubuntu

Приоритет: medium

EPSS Низкий

CVSS3: 2.9

Описание

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/trusty	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
esm-infra/xenial	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/trusty	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
esm-infra/xenial	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps/xenial	needs-triage
jammy	DNE
noble	DNE
questing	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps/xenial	needs-triage
jammy	DNE
noble	DNE
questing	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/xenial	needs-triage
jammy	needs-triage
noble	needs-triage
questing	needs-triage
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
esm-infra/xenial	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-apps/bionic	needs-triage
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/xenial	needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
devel	not-affected	2.7.4-1
esm-infra-legacy/trusty	released	2.1.0-4ubuntu1.4+esm11
esm-infra/bionic	released	2.2.5-3ubuntu0.9+esm3
esm-infra/focal	released	2.2.9-1ubuntu0.8+esm1
esm-infra/xenial	released	2.1.0-7ubuntu0.16.04.5+esm11
jammy	released	2.4.7-1ubuntu0.7
noble	released	2.6.1-2ubuntu0.4
questing	released	2.7.1-2ubuntu0.2
upstream	released	2.7.4

Показывать по

Релиз	Статус	Примечание
devel	not-affected	code not present
jammy	not-affected	code not present
noble	not-affected	code not present
questing	not-affected	code not present
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-apps/bionic	needs-triage
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/xenial	needs-triage
esm-infra-legacy/trusty	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
esm-infra/xenial	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/xenial	needs-triage
jammy	needs-triage
noble	DNE
questing	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps/bionic	released	1.2-4ubuntu0.18.04.1~esm6
esm-apps/focal	released	1.2-4ubuntu0.20.04.1~esm6
esm-apps/jammy	released	1.2-4ubuntu0.22.04.1~esm6
esm-apps/noble	released	1.2-4.1ubuntu2.24.0.4.1+esm4
esm-apps/xenial	released	1.2-3ubuntu0.16.04.1~esm5
jammy	needed
noble	needed
questing	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	ignored
esm-apps/bionic	needs-triage
esm-apps/focal	ignored
esm-apps/jammy	ignored
esm-apps/noble	ignored
esm-apps/xenial	needs-triage
jammy	ignored
noble	ignored
questing	ignored
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps/bionic	needs-triage
esm-apps/xenial	needs-triage
jammy	DNE
noble	DNE
questing	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/xenial	needs-triage
jammy	needs-triage
noble	needs-triage
questing	needs-triage
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/xenial	needs-triage
jammy	needs-triage
noble	needs-triage
questing	needs-triage
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	code-not-compiled
esm-infra/bionic	not-affected	code-not-compiled
esm-infra/focal	not-affected	code-not-compiled
esm-infra/xenial	not-affected	code-not-compiled
jammy	not-affected	code-not-compiled
noble	not-affected	code-not-compiled
questing	not-affected	code-not-compiled
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	code not present
jammy	not-affected	uses system expat
noble	not-affected	code not present
questing	not-affected	code not present
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps/bionic	needs-triage
esm-apps/xenial	needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	DNE
noble	DNE
questing	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps/xenial	needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	DNE
noble	DNE
questing	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/xenial	needs-triage
jammy	needs-triage
noble	needs-triage
questing	needs-triage
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/xenial	needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	needs-triage
noble	needs-triage
questing	needs-triage

Показывать по

Ссылки на источники

EPSS

Процентиль: 0%

0.00005

Низкий

2.9 Low

CVSS3

Связанные уязвимости

CVE-2026-24515

CVSS3: 2.9

redhat

2 месяца назад

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.

CVE-2026-24515

CVSS3: 2.9

nvd

2 месяца назад

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.

CVE-2026-24515

CVSS3: 2.9

debian

2 месяца назад

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy ...

GHSA-mpwv-4wmh-cvf7

CVSS3: 2.9

github

2 месяца назад

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.

BDU:2026-03634

CVSS3: 2.5

fstec

2 месяца назад

Уязвимость библиотеки для анализа XML-файлов libexpat, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании4

EPSS

Процентиль: 0%

0.00005

Низкий

2.9 Low

CVSS3

CVE-2026-24515

Описание

Пакет apache2

Пакет apr-util

Пакет ayttm

Пакет cableswig

Пакет cadaver

Пакет cmake

Пакет coin3

Пакет expat

Пакет firefox

Пакет gdcm

Пакет ghostscript

Пакет insighttoolkit4

Пакет libxmltok

Пакет matanza

Пакет smart

Пакет swish-e

Пакет tdom

Пакет texlive-bin

Пакет thunderbird

Пакет vnc4

Пакет vtk

Пакет wbxml2

Пакет xmlrpc-c

Ссылки на источники

Связанные уязвимости