CVE-2024-35176

mediumPriorität · verfolgen · 11EPSS 0.021 · 81. PerzentilExploit · PoCDEEURUUS
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
1 exploit · PoC
Likely / severe?
2.06% (81st) EPSS
CVSS 5.3 · medium
Is it mine?
35 products
Prüfe deine Angriffsfläche
Who says so?
7 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability. As a workaround, don't parse untrusted XMLs.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobenpcs-0:0.10.18-2.el8_10.1.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-0:0.10.18-2.el8_10.1.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-0:0.10.18-2.el8_10.1.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-0:0.10.18-2.el8_10.1.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-0:0.10.18-2.el8_10.1.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-0:0.10.18-2.el8_10.1.src as a component of Red Hat Enterprise Linux HighAvailability (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-0:0.10.18-2.el8_10.1.src as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-0:0.10.18-2.el8_10.1.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-0:0.10.18-2.el8_10.1.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-snmp-0:0.10.18-2.el8_10.1.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-snmp-0:0.10.18-2.el8_10.1.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-snmp-0:0.10.18-2.el8_10.1.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-snmp-0:0.10.18-2.el8_10.1.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-snmp-0:0.10.18-2.el8_10.1.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-snmp-0:0.10.18-2.el8_10.1.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
  • Behobenpcs-snmp-0:0.10.18-2.el8_10.1.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:5338
02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.3
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.15.3mediumAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · FSTEC (BDU) RU
v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · ENISA EU
v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · security-advisories@github.comAusnutzbarkeit 3.9 · Auswirkung 1.4
v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · OSV
v3.15mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:Psecondary · CVSS-BT (t0sche)
v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · Red Hat Product Security US
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-400USCWE-400USCWE-400USCWE-770USCWE-770US
05

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

06

betroffene Produkte (35)

Betroffene Produkte und Versionsbereiche.

20 von 35 angezeigt
07

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHSA-2024:5338Red Hat Security Advisory: pcs security update2024-08-13csaf · redhat_csafUS

    An update for pcs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • WID-SEC-W-2024-1465IBM License Metric Tool: Schwachstelle ermöglicht Denial of ServiceDeutsch2024-06-26csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM License Metric Tool ausnutzen, um einen Denial of Service Angriff durchzuführen.

  • WID-SEC-W-2024-1850Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2024-08-13csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.

  • GHSA-vg3r-rm7w-2xghREXML contains a denial of service vulnerability2024-05-16ghsa · osvUS

    ### Impact The REXML gem before 3.2.6 has a DoS vulnerability when it parses an XML that has many `>`s in an attribute value. If you need to parse untrusted XMLs, you may be impacted to this vulnerability. ### Patches The REXML gem 3.2.7 or later include the patch to fix this vulnerability. ### Workarounds Don't parse untrusted XMLs. ### References * https://www.ruby-lang.org/en/news/2024/05/16/dos-rexml-cve-2024-35176/

08

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

09

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducert_bundnvdosvredhat_csafNVDCVE.orgMITRE
veröffentlicht 2024-05-16geändert 2026-06-17
10

Referenzen (15)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan