CVE-2026-56407

Опубликовано: 21 июн. 2026

Источник: ubuntu

Приоритет: medium

EPSS Низкий

CVSS3: 6.9

Описание

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/trusty	not-affected	uses system expat
esm-infra-legacy/xenial	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
resolute	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/trusty	not-affected	uses system expat
esm-infra-legacy/xenial	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
resolute	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored	end of life, was needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/xenial	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
resolute	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/resolute	not-affected	uses system expat
esm-infra-legacy/trusty	needs-triage
jammy	not-affected	uses system expat
noble	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-infra-legacy/trusty	needs-triage
esm-infra-legacy/xenial	needs-triage
esm-infra/bionic	needs-triage
esm-infra/focal	needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored	end of life, was needs-triage
resolute	needs-triage
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	code not present
jammy	not-affected	code not present
noble	not-affected	code not present
questing	not-affected	code not present
resolute	not-affected	code not present
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/resolute	not-affected	uses system expat
esm-infra-legacy/trusty	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/xenial	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
resolute	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
jammy	needs-triage
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
jammy	needs-triage
noble	needs-triage
questing	DNE
resolute	DNE

Показывать по

Релиз	Статус	Примечание
devel	ignored
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	ignored
esm-apps/jammy	ignored
esm-apps/noble	ignored
esm-apps/resolute	ignored
jammy	ignored
noble	ignored
questing	ignored

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored	end of life, was needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored	end of life, was needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	code-not-compiled
esm-apps/resolute	not-affected	code-not-compiled
esm-infra-legacy/xenial	not-affected	code-not-compiled
esm-infra/bionic	not-affected	code-not-compiled
esm-infra/focal	not-affected	code-not-compiled
jammy	not-affected	code-not-compiled
noble	not-affected	code-not-compiled
questing	not-affected	code-not-compiled
resolute	not-affected	code-not-compiled
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	code not present
jammy	not-affected	uses system expat
noble	not-affected	code not present
questing	not-affected	code not present
resolute	not-affected	code not present
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored	end of life, was needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	needs-triage
noble	needs-triage

Показывать по

Ссылки на источники

EPSS

Процентиль: 1%

0.00102

Низкий

6.9 Medium

CVSS3

Связанные уязвимости

CVE-2026-56407

CVSS3: 6.9

redhat

около 1 месяца назад

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

CVE-2026-56407

CVSS3: 6.9

nvd

около 1 месяца назад

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

CVE-2026-56407

CVSS3: 6.9

msrc

около 1 месяца назад

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

CVE-2026-56407

CVSS3: 6.9

debian

около 1 месяца назад

libexpat before 2.8.2 has an integer overflow in doProlog that is rela ...

GHSA-r8qx-5vfx-8w6r

CVSS3: 6.9

github

около 1 месяца назад

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

EPSS

Процентиль: 1%

0.00102

Низкий

6.9 Medium

CVSS3

CVE-2026-56407

Описание

Пакет apache2

Пакет apr-util

Пакет ayttm

Пакет cableswig

Пакет cadaver

Пакет cmake

Пакет coin3

Пакет expat

Пакет firefox

Пакет gdcm

Пакет ghostscript

Пакет insighttoolkit4

Пакет libxmltok

Пакет matanza

Пакет smart

Пакет swish-e

Пакет tdom

Пакет texlive-bin

Пакет thunderbird

Пакет vnc4

Пакет vtk

Пакет wbxml2

Пакет xmlrpc-c

Ссылки на источники

Связанные уязвимости