Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-42260

Опубликовано: 11 окт. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

2.6.2-6
esm-apps/bionic

released

2.6.2-4ubuntu0.18.04.1~esm1
esm-apps/focal

released

2.6.2-4+deb10u1build0.20.04.1
esm-apps/jammy

not-affected

2.6.2-6
esm-infra/xenial

released

2.6.2-3ubuntu0.1~esm1
focal

released

2.6.2-4+deb10u1build0.20.04.1
hirsute

ignored

end of life
impish

ignored

end of life
jammy

not-affected

2.6.2-6

Показывать по

EPSS

Процентиль: 77%
0.01073
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
больше 4 лет назад

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service.

CVSS3: 7.5
debian
больше 4 лет назад

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp ...

suse-cvrf
около 4 лет назад

Security update for tinyxml

suse-cvrf
около 4 лет назад

Security update for tinyxml

CVSS3: 7.5
github
больше 3 лет назад

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service.

EPSS

Процентиль: 77%
0.01073
Низкий

5 Medium

CVSS2

7.5 High

CVSS3