CVE-2024-50602: Debian Linux

Medium severity, CVSS 5.9. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

Affected products

• Debian Debian Linux: version 11.0 only
• Libexpat Project Libexpat: before 2.6.4 (fixed in 2.6.4)
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Hci Compute Node: affected versions not specified
• Netapp Solidfire & Hci Management Node: affected versions not specified
• Netapp Solidfire & Hci Storage Node: affected versions not specified
• Netapp Windows Host Utilities: affected versions not specified

Published 2024-10-27. Last modified 2026-06-17.