Описание
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| expat | fixed | 2.7.5-1 | package | |
| expat | no-dsa | bookworm | package | |
| expat | postponed | bullseye | package |
Примечания
https://github.com/libexpat/libexpat/issues/1161
https://github.com/libexpat/libexpat/pull/1162
Fixed by: https://github.com/libexpat/libexpat/commit/55cda8c7125986e17d7e1825cba413bd94a35d02
Test: https://github.com/libexpat/libexpat/commit/a7805c1a8a48d2ce83ef289cf55bdc8b45de76a8
EPSS
Процентиль: 12%
0.00216
Низкий
Связанные уязвимости
CVSS3: 4
ubuntu
5 месяцев назад
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
CVSS3: 4
redhat
5 месяцев назад
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
CVSS3: 4
nvd
5 месяцев назад
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
CVSS3: 4
msrc
5 месяцев назад
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
CVSS3: 4
github
5 месяцев назад
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
EPSS
Процентиль: 12%
0.00216
Низкий