CVE-2024-50602

Published: Oct 27, 2024Modified: Jun 17, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

Affected (12)

Products: Debian: Debian Linux · Netapp: Active Iq Unified Manager, Hci Compute Node, Solidfire & Hci Management Node, Solidfire & Hci Storage Node, Windows Host Utilities, H300s Firmware, H500s Firmware, H700s Firmware, H410s Firmware, H410c Firmware · Libexpat Project: Libexpat

Debian

1 product

Debian Linux

Netapp

10 products

Active Iq Unified Manager

Hci Compute Node

Solidfire & Hci Management Node

Solidfire & Hci Storage Node

Windows Host Utilities

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 11.0
Netapp Active Iq Unified Manager	All versions
Netapp Hci Compute Node	All versions
Netapp Solidfire & Hci Management Node	All versions
Netapp Solidfire & Hci Storage Node	All versions
Netapp Windows Host Utilities	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions

Running on/with	Platform Versions
Netapp H300s	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500s Firmware	All versions

Running on/with	Platform Versions
Netapp H500s	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700s Firmware	All versions

Running on/with	Platform Versions
Netapp H700s	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410s Firmware	All versions

Running on/with	Platform Versions
Netapp H410s	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410c Firmware	All versions

Running on/with	Platform Versions
Netapp H410c	All versions

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Libexpat Project Libexpat	Before 2.6.4

Related CWEs

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (3)

https://github.com/libexpat/libexpat/pull/915

Source: cve@mitre.org

Issue Tracking

https://lists.debian.org/debian-lts-announce/2025/04/msg00040.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://security.netapp.com/advisory/ntap-20250404-0008/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.