Описание
Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".
A flaw was found in github.com/antchfx/xpath. An attacker could exploit this vulnerability by providing specially crafted boolean XPath expressions that evaluate to true. This can cause an infinite loop within the logicalQuery.Select function, leading to 100% CPU utilization. The consequence is a Denial of Service (DoS) condition, making the affected system unresponsive.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Compliance Operator | compliance/openshift-compliance-operator-bundle | Fix deferred | ||
| Compliance Operator | compliance/openshift-compliance-rhel8-operator | Fix deferred | ||
| File Integrity Operator | compliance/openshift-compliance-must-gather-rhel8 | Fix deferred | ||
| File Integrity Operator | compliance/openshift-compliance-openscap-rhel8 | Fix deferred | ||
| File Integrity Operator | compliance/openshift-compliance-operator-bundle | Fix deferred | ||
| File Integrity Operator | compliance/openshift-compliance-rhel8-operator | Fix deferred | ||
| Migration Toolkit for Applications 8 | mta/mta-cli-rhel9 | Fix deferred | ||
| Migration Toolkit for Applications 8 | mta/mta-dotnet-external-provider-rhel8 | Fix deferred | ||
| Migration Toolkit for Applications 8 | mta/mta-dotnet-external-provider-rhel9 | Fix deferred | ||
| Migration Toolkit for Applications 8 | mta/mta-generic-external-provider-rhel9 | Fix deferred |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
6.2 Medium
CVSS3
Связанные уязвимости
Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".
Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".
Boolean XPath expressions that evaluate to true can cause an infinite ...
XPath: Boolean expression infinite loop leads to denial of service via CPU exhaustion
EPSS
6.2 Medium
CVSS3