Описание
The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| azl3 python3 3.12.9-14 on Azure Linux 3.0 | ||
| azl3 python3 3.12.14-1 on Azure Linux 3.0 | ||
| azl3 python3 3.12.14-2 on Azure Linux 3.0 | - |
Показывать по
EPSS
Связанные уязвимости
`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.
`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.
`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.
`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entro ...
`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.
EPSS