CVE-2024-8176

Exploitation

Public exploit code exists. CISA's assessment records a public proof of concept. That is not a report of exploitation in the wild.

SSVC decision

• ExploitationpocPublic proof-of-concept exploit code exists. Not a report of exploitation in the wild.
• AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
• Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

1.30% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 68.3% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-06-30.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2025-03-14 08:19Z1 YR AGO

Last updated

2026-06-29 23:24Z2 MO AGO

Reserved

2024-08-26

Assigning CNA

redhat

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

• CWE-674Uncontrolled RecursionClass

Data version

5.2

Document digest

d219ca072a30683d17b64cc9910d7f873648af9b08c7b942094ee909295be572

• access.redhat.comRHSA-2025:13681https://access.redhat.com/errata/RHSA-2025:13681vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:22033https://access.redhat.com/errata/RHSA-2025:22033vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:22034https://access.redhat.com/errata/RHSA-2025:22034vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:22035https://access.redhat.com/errata/RHSA-2025:22035vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:22607https://access.redhat.com/errata/RHSA-2025:22607vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:22785https://access.redhat.com/errata/RHSA-2025:22785vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:22842https://access.redhat.com/errata/RHSA-2025:22842vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:22871https://access.redhat.com/errata/RHSA-2025:22871vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:3531https://access.redhat.com/errata/RHSA-2025:3531vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:3734https://access.redhat.com/errata/RHSA-2025:3734vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:3913https://access.redhat.com/errata/RHSA-2025:3913vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:4048https://access.redhat.com/errata/RHSA-2025:4048vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:4446https://access.redhat.com/errata/RHSA-2025:4446vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:4447https://access.redhat.com/errata/RHSA-2025:4447vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:4448https://access.redhat.com/errata/RHSA-2025:4448vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:4449https://access.redhat.com/errata/RHSA-2025:4449vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:7444https://access.redhat.com/errata/RHSA-2025:7444vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:7512https://access.redhat.com/errata/RHSA-2025:7512vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2025:8385https://access.redhat.com/errata/RHSA-2025:8385vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/security/cve/CVE-2024-8176vdb-entryx_refsource_REDHAT
• bugzilla.redhat.comRHBZ#2310137https://bugzilla.redhat.com/show_bug.cgi?id=2310137issue-trackingx_refsource_REDHAT
• github.comhttps://github.com/libexpat/libexpat/issues/893
• github.comhttps://github.com/libexpat/libexpat/pull/973
• www.openwall.comhttp://www.openwall.com/lists/oss-security/2025/03/15/1
• blog.hartwork.orghttps://blog.hartwork.org/posts/expat-2-7-0-released/
• github.comhttps://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes#L40-L52
• bugzilla.suse.comhttps://bugzilla.suse.com/show_bug.cgi?id=1239618
• ubuntu.comhttps://ubuntu.com/security/CVE-2024-8176
• security-tracker.debian.orghttps://security-tracker.debian.org/tracker/CVE-2024-8176
• gitlab.alpinelinux.orghttps://gitlab.alpinelinux.org/alpine/aports/-/commit/d068c3ff36fc6f4789988a09c69b434db757db53
• security.netapp.comhttps://security.netapp.com/advisory/ntap-20250328-0009/
• www.kb.cert.orghttps://www.kb.cert.org/vuls/id/760160
• seclists.orghttp://seclists.org/fulldisclosure/2025/May/12
• seclists.orghttp://seclists.org/fulldisclosure/2025/May/11
• seclists.orghttp://seclists.org/fulldisclosure/2025/May/10
• seclists.orghttp://seclists.org/fulldisclosure/2025/May/8
• seclists.orghttp://seclists.org/fulldisclosure/2025/May/7
• seclists.orghttp://seclists.org/fulldisclosure/2025/May/6
• www.openwall.comhttp://www.openwall.com/lists/oss-security/2025/09/24/11