Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-42260

Опубликовано: 11 окт. 2021
Источник: debian
EPSS Низкий

Описание

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
tinyxmlfixed2.6.2-6package
tinyxmlfixed2.6.2-4+deb11u1bullseyepackage

Примечания

  • https://sourceforge.net/p/tinyxml/bugs/141/

  • https://sourceforge.net/p/tinyxml/git/merge-requests/1/

EPSS

Процентиль: 77%
0.01073
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 4 лет назад

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service.

CVSS3: 7.5
nvd
больше 4 лет назад

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service.

suse-cvrf
около 4 лет назад

Security update for tinyxml

suse-cvrf
около 4 лет назад

Security update for tinyxml

CVSS3: 7.5
github
больше 3 лет назад

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service.

EPSS

Процентиль: 77%
0.01073
Низкий