Investigation request (Vulnerability: CVE-2024-8176)

[Sakashita]

Dear Sir

Could you please let me confirm whether the following products are affected by the vulmerability: CVE-2024-8176?
Thank you for your cooperation in advance.

Taget products:
Veeam Backup & Replication
Veeam Agent for Microsoft Windows

Detail of the vulnerability:
https://nvd.nist.gov/vuln/detail/CVE-2024-8176

Best regards,
SAKASHITA Taiga

[david.domask]

Hi Sakashita, welcome to the forums.

https://www.veeam.com/legal/eula-oss.ht ... rsion=12.3

libexpat is not used, so this CVE is not a concern. The above link shows the open source components used in each product, and you can check CVEs for such components against this list.