Investigation request (Vulnerability: CVE-2024-8176)

[Sakashita]

Dear Sir

Could you please let me confirm whether the following products are affected by the vulmerability: CVE-2024-8176?
Thank you for your cooperation in advance.

Taget products:
Veeam Backup & Replication
Veeam Agent for Microsoft Windows

Detail of the vulnerability:
https://nvd.nist.gov/vuln/detail/CVE-2024-8176

Best regards,
SAKASHITA Taiga

[david.domask]

Hi Sakashita, welcome to the forums.

https://www.veeam.com/legal/eula-oss.ht ... rsion=12.3

libexpat is not used, so this CVE is not a concern. The above link shows the open source components used in each product, and you can check CVEs for such components against this list.

[Sakashita]

Dear Sir

Thank you for your response.
Please close this post.

[Gostev]

@Sakashita please note that R&D cannot provide authoritative answers on security vulnerabilities over forum posts, please use the standard process for this and future vulnerabilities.