CVE-2026-45186

Опубликовано: 10 мая 2026

Источник: ubuntu

Приоритет: medium

EPSS Низкий

CVSS3: 2.9

Описание

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/trusty	not-affected	uses system expat
esm-infra-legacy/xenial	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
esm-infra/xenial	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
resolute	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/trusty	not-affected	uses system expat
esm-infra-legacy/xenial	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
esm-infra/xenial	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
resolute	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/xenial	ignored	end of ESM support, was needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/xenial	ignored	end of ESM support, was needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
esm-apps/xenial	ignored	end of ESM support, was needs-triage
jammy	needs-triage
noble	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/xenial	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
esm-infra/xenial	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
resolute	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/resolute	not-affected	uses system expat
esm-apps/xenial	ignored	end of ESM support, was needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-infra-legacy/trusty	needs-triage
esm-infra-legacy/xenial	needs-triage
esm-infra/bionic	needs-triage
esm-infra/focal	needs-triage
esm-infra/xenial	ignored	end of ESM support, was needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored	end of life, was needs-triage
resolute	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	code not present
jammy	not-affected	code not present
noble	not-affected	code not present
questing	not-affected	code not present
resolute	not-affected	code not present
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/resolute	not-affected	uses system expat
esm-apps/xenial	ignored	end of ESM support, was needs-triage
esm-infra-legacy/trusty	not-affected	uses system expat
jammy	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/xenial	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
esm-infra/xenial	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
resolute	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/xenial	ignored	end of ESM support, was needs-triage
jammy	needs-triage
noble	DNE
questing	DNE
resolute	DNE

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/xenial	ignored	end of ESM support, was needs-triage
jammy	needs-triage
noble	needs-triage
questing	DNE

Показывать по

Релиз	Статус	Примечание
devel	ignored
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	ignored
esm-apps/jammy	ignored
esm-apps/noble	ignored
esm-apps/resolute	ignored
esm-apps/xenial	ignored	end of ESM support, was needs-triage
jammy	ignored
noble	ignored

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/xenial	ignored	end of ESM support, was needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
esm-apps/xenial	ignored	end of ESM support, was needs-triage
jammy	needs-triage
noble	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
esm-apps/xenial	ignored	end of ESM support, was needs-triage
jammy	needs-triage
noble	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	code-not-compiled
esm-apps/resolute	not-affected	code-not-compiled
esm-infra-legacy/xenial	not-affected	code-not-compiled
esm-infra/bionic	not-affected	code-not-compiled
esm-infra/focal	not-affected	code-not-compiled
esm-infra/xenial	not-affected	code-not-compiled
jammy	not-affected	code-not-compiled
noble	not-affected	code-not-compiled
questing	not-affected	code-not-compiled
resolute	not-affected	code-not-compiled

Показывать по

Релиз	Статус	Примечание
devel	not-affected	code not present
jammy	not-affected	uses system expat
noble	not-affected	code not present
questing	not-affected	code not present
resolute	not-affected	code not present
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/xenial	ignored	end of ESM support, was needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/xenial	ignored	end of ESM support, was needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
esm-apps/xenial	ignored	end of ESM support, was needs-triage
jammy	needs-triage
noble	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
esm-apps/xenial	ignored	end of ESM support, was needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	needs-triage

Показывать по

Ссылки на источники

EPSS

Процентиль: 36%

0.00443

Низкий

2.9 Low

CVSS3

Связанные уязвимости

CVE-2026-45186

CVSS3: 7.5

redhat

3 месяца назад

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

CVE-2026-45186

CVSS3: 2.9

nvd

3 месяца назад

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

CVE-2026-45186

CVSS3: 2.9

msrc

3 месяца назад

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

CVE-2026-45186

CVSS3: 2.9

debian

3 месяца назад

In libexpat before 2.8.1, the computational complexity of attribute na ...

RLSA-2026:23230

rocky

около 2 месяцев назад

Important: expat security update

EPSS

Процентиль: 36%

0.00443

Низкий

2.9 Low

CVSS3

CVE-2026-45186

Описание

Пакет apache2

Пакет apr-util

Пакет ayttm

Пакет cableswig

Пакет cadaver

Пакет cmake

Пакет coin3

Пакет expat

Пакет firefox

Пакет gdcm

Пакет ghostscript

Пакет insighttoolkit4

Пакет libxmltok

Пакет matanza

Пакет smart

Пакет swish-e

Пакет tdom

Пакет texlive-bin

Пакет thunderbird

Пакет vnc4

Пакет vtk

Пакет wbxml2

Пакет xmlrpc-c

Ссылки на источники

Связанные уязвимости