{"schema":"vulnpedia.research/1","cve":"CVE-2024-8176","references":[{"url":"https://access.redhat.com/errata/RHSA-2025:13681","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:13681"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:13681"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:13681"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22033","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:22033"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:22033"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22033"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22034","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:22034"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:22034"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22034"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22035","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:22035"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:22035"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22035"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22607","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:22607"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:22607"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22607"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22785","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:22785"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:22785"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22785"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22842","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:22842"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:22842"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22842"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22871","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:22871"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:22871"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22871"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:3531","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:3531"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:3531"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:3531"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:3734","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:3734"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:3734"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:3734"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:3913","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:3913"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:3913"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:3913"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:4048","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:4048"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:4048"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:4048"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:4446","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:4446"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:4446"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:4446"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:4447","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:4447"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:4447"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:4447"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:4448","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:4448"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:4448"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:4448"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:4449","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:4449"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:4449"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:4449"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:7444","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:7444"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:7444"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:7444"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:7512","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:7512"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:7512"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:7512"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:8385","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/errata/RHSA-2025:8385"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/errata/RHSA-2025:8385"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/errata/RHSA-2025:8385"}]},{"url":"https://access.redhat.com/security/cve/CVE-2024-8176","tags":["vdb-entry","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://access.redhat.com/security/cve/CVE-2024-8176"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://access.redhat.com/security/cve/CVE-2024-8176"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://access.redhat.com/security/cve/CVE-2024-8176"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310137","tags":["issue-tracking","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310137"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310137"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310137"}]},{"url":"https://github.com/libexpat/libexpat/issues/893","tags":["vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://github.com/libexpat/libexpat/issues/893"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://github.com/libexpat/libexpat/issues/893"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://github.com/libexpat/libexpat/issues/893"}]},{"url":"https://github.com/libexpat/libexpat/pull/973","tags":["vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-21T20:11:22.365Z","url":"https://github.com/libexpat/libexpat/pull/973"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://github.com/libexpat/libexpat/pull/973"},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://github.com/libexpat/libexpat/pull/973"}]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/15/1","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"http://www.openwall.com/lists/oss-security/2025/03/15/1"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"http://www.openwall.com/lists/oss-security/2025/03/15/1"}]},{"url":"https://blog.hartwork.org/posts/expat-2-7-0-released/","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"https://blog.hartwork.org/posts/expat-2-7-0-released/"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://blog.hartwork.org/posts/expat-2-7-0-released/"}]},{"url":"https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes#L40-L52","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes#L40-L52"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes#L40-L52"}]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1239618","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"https://bugzilla.suse.com/show_bug.cgi?id=1239618"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://bugzilla.suse.com/show_bug.cgi?id=1239618"}]},{"url":"https://ubuntu.com/security/CVE-2024-8176","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"https://ubuntu.com/security/CVE-2024-8176"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://ubuntu.com/security/CVE-2024-8176"}]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-8176","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"https://security-tracker.debian.org/tracker/CVE-2024-8176"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://security-tracker.debian.org/tracker/CVE-2024-8176"}]},{"url":"https://gitlab.alpinelinux.org/alpine/aports/-/commit/d068c3ff36fc6f4789988a09c69b434db757db53","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"https://gitlab.alpinelinux.org/alpine/aports/-/commit/d068c3ff36fc6f4789988a09c69b434db757db53"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://gitlab.alpinelinux.org/alpine/aports/-/commit/d068c3ff36fc6f4789988a09c69b434db757db53"}]},{"url":"https://security.netapp.com/advisory/ntap-20250328-0009/","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"https://security.netapp.com/advisory/ntap-20250328-0009/"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://security.netapp.com/advisory/ntap-20250328-0009/"}]},{"url":"https://www.kb.cert.org/vuls/id/760160","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"https://www.kb.cert.org/vuls/id/760160"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://www.kb.cert.org/vuls/id/760160"}]},{"url":"http://seclists.org/fulldisclosure/2025/May/12","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"http://seclists.org/fulldisclosure/2025/May/12"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"http://seclists.org/fulldisclosure/2025/May/12"}]},{"url":"http://seclists.org/fulldisclosure/2025/May/11","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"http://seclists.org/fulldisclosure/2025/May/11"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"http://seclists.org/fulldisclosure/2025/May/11"}]},{"url":"http://seclists.org/fulldisclosure/2025/May/10","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"http://seclists.org/fulldisclosure/2025/May/10"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"http://seclists.org/fulldisclosure/2025/May/10"}]},{"url":"http://seclists.org/fulldisclosure/2025/May/8","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"http://seclists.org/fulldisclosure/2025/May/8"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"http://seclists.org/fulldisclosure/2025/May/8"}]},{"url":"http://seclists.org/fulldisclosure/2025/May/7","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"http://seclists.org/fulldisclosure/2025/May/7"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"http://seclists.org/fulldisclosure/2025/May/7"}]},{"url":"http://seclists.org/fulldisclosure/2025/May/6","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"http://seclists.org/fulldisclosure/2025/May/6"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"http://seclists.org/fulldisclosure/2025/May/6"}]},{"url":"http://www.openwall.com/lists/oss-security/2025/09/24/11","tags":[],"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-04T21:09:04.638Z","url":"http://www.openwall.com/lists/oss-security/2025/09/24/11"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"http://www.openwall.com/lists/oss-security/2025/09/24/11"}]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":[],"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T00:33:55.168Z","origins":[{"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T00:33:55.168Z","url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-355557.html","tags":[],"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T00:33:55.168Z","origins":[{"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T00:33:55.168Z","url":"https://cert-portal.siemens.com/productcert/html/ssa-355557.html"},{"source":"nvd","sourceId":"CVE-2024-8176","modified":"2026-10-21T21:17:30.597","url":"https://cert-portal.siemens.com/productcert/html/ssa-355557.html"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-8176","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2024-8176"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8176","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8176"}]},{"source":"euvd","sourceId":"EUVD-2024-54057","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-54057","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2024-54057","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-54057"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/uthrasri/Expat_2.6.2_CVE-2024-8176","source":"poc-in-github","sourceId":"CVE-2024-8176","modified":"2025-04-10T19:33:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2024-8176","url":"https://github.com/uthrasri/Expat_2.6.2_CVE-2024-8176"},{"source":"poc-in-github","sourceId":"CVE-2024-8176","modified":"2025-04-10T19:33:38Z","url":"https://github.com/uthrasri/Expat_2.6.2_CVE-2024-8176"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.aarch64","product":"expat-debuginfo-0:2.7.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:7512"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/expat-debuginfo@2.7.1-1.el10_0?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.ppc64le","product":"expat-debuginfo-0:2.7.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:7512"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/expat-debuginfo@2.7.1-1.el10_0?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x","product":"xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:4048"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-11.el8_10?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"BaseOS-8.4.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686","product":"xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:4448"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-5.el8_4.2?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64","product":"xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:4448"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-5.el8_4.2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64","product":"xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:4449"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-6.el8_6.1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64","product":"xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:4446"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/xmlrpc-c@1.51.0-8.el8_8.1?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"BaseOS-9.0.0.Z.E4S:expat-0:2.2.10-12.el9_0.4.x86_64","product":"expat-0:2.2.10-12.el9_0.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:22035"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/expat@2.2.10-12.el9_0.4?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x","product":"xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:4048"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-11.el8_10?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64","product":"xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:4446"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/xmlrpc-c-c%2B%2B@1.51.0-8.el8_8.1?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"Red Hat JBoss Core Services 2.4.62.SP1","product":"Red Hat JBoss Core Services 2.4.62.SP1","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link. You must be logged in to download the update.","url":"https://access.redhat.com/errata/RHSA-2025:13681"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"red_hat_enterprise_linux_6:compat-expat1","product":"compat-expat1 as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/compat-expat1","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"red_hat_enterprise_linux_6:expat-devel","product":"expat-devel as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/expat-devel","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"red_hat_enterprise_linux_7:expat-devel","product":"expat-devel as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/expat-devel","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"red_hat_enterprise_linux_7:firefox","product":"firefox as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/firefox","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"red_hat_enterprise_linux_7:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"red_hat_enterprise_linux_8:mingw32-expat","product":"mingw32-expat as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/mingw32-expat","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"red_hat_enterprise_linux_8:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"red_hat_enterprise_linux_9:firefox-x11::firefox:flatpak","product":"firefox-x11 (firefox:flatpak) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/firefox-x11?rpmmod=firefox:flatpak","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"red_hat_enterprise_linux_9:firefox::firefox:flatpak","product":"firefox (firefox:flatpak) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/firefox?rpmmod=firefox:flatpak","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"red_hat_enterprise_linux_9:thunderbird.src::thunderbird:flatpak","product":"thunderbird.src (thunderbird:flatpak) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/thunderbird?arch=src&rpmmod=thunderbird:flatpak","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","product":"openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"AppStream-9.0.0.Z.E4S:expat-debuginfo-0:2.2.10-12.el9_0.4.aarch64","product":"expat-debuginfo-0:2.2.10-12.el9_0.4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat-debuginfo@2.2.10-12.el9_0.4?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"AppStream-9.2.0.Z.E4S:expat-debuginfo-0:2.5.0-1.el9_2.3.ppc64le","product":"expat-debuginfo-0:2.5.0-1.el9_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat-debuginfo@2.5.0-1.el9_2.3?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"AppStream-9.4.0.Z.EUS:expat-debuginfo-0:2.5.0-2.el9_4.3.s390x","product":"expat-debuginfo-0:2.5.0-2.el9_4.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat-debuginfo@2.5.0-2.el9_4.3?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"BaseOS-8.2.0.Z.AUS:expat-devel-0:2.2.10-1.el8_2.i686","product":"expat-devel-0:2.2.10-1.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat-devel@2.2.10-1.el8_2?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"BaseOS-8.6.0.Z.AUS:expat-0:2.2.10-1.el8_6.src","product":"expat-0:2.2.10-1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat@2.2.10-1.el8_6?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"BaseOS-8.6.0.Z.E4S:expat-debugsource-0:2.2.10-1.el8_6.x86_64","product":"expat-debugsource-0:2.2.10-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat-debugsource@2.2.10-1.el8_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"BaseOS-8.8.0.Z.E4S:expat-debuginfo-0:2.2.10-1.el8_8.x86_64","product":"expat-debuginfo-0:2.2.10-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat-debuginfo@2.2.10-1.el8_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"BaseOS-9.0.0.Z.E4S:expat-debuginfo-0:2.2.10-12.el9_0.4.ppc64le","product":"expat-debuginfo-0:2.2.10-12.el9_0.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat-debuginfo@2.2.10-12.el9_0.4?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"BaseOS-9.2.0.Z.E4S:expat-debugsource-0:2.5.0-1.el9_2.3.s390x","product":"expat-debugsource-0:2.5.0-1.el9_2.3.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat-debugsource@2.5.0-1.el9_2.3?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]},{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json","productId":"red_hat_enterprise_linux_8:lua-expat.src","product":"lua-expat.src as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/lua-expat?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2024-8176","modified":"2026-10-21T20:11:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8176.json"}]}],"vendorCoverage":{"total":659,"shown":32,"omitted":627,"source":"redhat"}}