USN-8813-1: Expat vulnerabilities
What it means
Ubuntu Security Notice USN-8813-1 segnala vulnerabilità in Expat, una libreria di parsing XML. Le vulnerabilità permettono a un attaccante di causare crash, esecuzione di codice arbitrario o denial of service. Le patch sono disponibili per diverse versioni di libexpat1 e expat. Nessun sfruttamento attivo in rete confermato.
Why it matters
Le PMI italiane utilizzano spesso sistemi basati su Ubuntu. Queste vulnerabilità possono compromettere la stabilità e la sicurezza delle applicazioni che usano Expat, potenzialmente causando interruzioni del servizio o esecuzione di codice non autorizzato.
Recommended actions
- Applicare le patch disponibili per libexpat1 e expat (vedi elenco versioni)
- Verificare l'aggiornamento di tutti i sistemi Ubuntu con pacchetti vulnerabili
- Disattivare o limitare l'uso di funzionalità XML non necessarie in applicazioni critiche
- Configurare firewall per bloccare richieste XML non autorizzate
- Monitorare i log di applicazioni che usano Expat per segnali di crash o comportamenti anomali
- Utilizzare Ubuntu Pro per ottenere copertura di sicurezza aggiuntiva e patch aggiornate
- Eseguire test di penetrazione per verificare la protezione contro attacchi basati su Expat
Potential operational benefits
- Riduzione della superficie esposta a vulnerabilità di parsing XML
- Miglioramento della stabilità e sicurezza delle applicazioni
- Aumento della protezione contro attacchi di tipo denial of service e esecuzione di codice
Translation in progress
The official content is available in the original language. The Italian version will be published once automated checks are complete.
Text acquired from the source
It was discovered that Expat did not correctly handle certain integer arithmetic. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-56406, CVE-2026-56407, CVE-2026-56409, CVE-2026-56410, CVE-2026-56411) It was discovered that Expat did not correctly track handler call depth. An attacker could possibly use this issue to cause Expat to crash or execute arbitrary code. (CVE-2026-56131) It was discovered that Expat did not correctly handle certain memory operations. An attacker could possibly use this issue to cause Expat to crash or execute arbitrary code. (CVE-2026-56132) It was discovered that Expat did not correctly handle certain Unicode characters. An attacker could possibly use this issue to cause Expat to use excessive resources, leading to a denial of service. (CVE-2026-72522) It was discovered that Expat did not correctly process certain XML attributes. A remote attacker could possibly use this issue to cause Expat to use excessive resources, leading to a denial of service. (CVE-2026-66046) It was discovered that Expat did not correctly handle certain external entities. An attacker could possibly use this issue to cause Expat to crash or execute arbitrary code. (CVE-2026-76641) It was discovered that Expat did not correctly track handler call depth with custom encodings. An attacker could possibly use this issue to cause Expat to crash or execute arbitrary code. (CVE-2026-76957)
- Source
- Ubuntu Security Notices
- Publishing entity
- Ubuntu Security
- Entity type
- vendor security
- Area
- Global
- Original language
- en · translation in preparation
- Publication
- 24/09/2026 14:45
- MITRE ATT&CK
- T1190, T1486, T1078
- CVE
- CVE-2026-56406, CVE-2026-56407, CVE-2026-56409, CVE-2026-56410, CVE-2026-56411, CVE-2026-56131, CVE-2026-56132, CVE-2026-72522, CVE-2026-66046, CVE-2026-76641, CVE-2026-76957
Affected products and versions
The collector will check NVD and the available official vendor advisories.