Severity
6.5MEDIUM
EPSS
0.6%
top 29.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 31
Latest updateMay 13

Description

libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, aka the "billion laughs attack."

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

NVDxmlsoft/libxml2< 2.5.0

Patches

🔴Vulnerability Details

4
GHSA
JBossWS vulnerable to uncontrolled recursion2022-05-13
GHSA
GHSA-6wfm-7hqx-39wg: libxml2, possibly before 22022-04-29
GHSA
SnakeYAML Entity Expansion during load operation2021-06-04
CVEList
CVE-2003-1564: libxml2, possibly before 22008-09-02

📋Vendor Advisories

10
Microsoft
Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader a related issue to CVE-2003-1564.2020-01-14
Red Hat
snakeyaml: Billion laughs attack via alias feature2019-12-12
Microsoft
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.2019-12-10
Red Hat
qt: XML entity expansion vulnerability2015-07-24
Red Hat
JBossWS remote Denial of Service2011-09-15

💬Community

5
Bugzilla
CVE-2015-9541 qt: XML entity expansion vulnerability2020-02-10
Bugzilla
CVE-2017-18640 snakeyaml: Billion laughs attack via alias feature2019-12-19
Bugzilla
CVE-2009-1955 apr-util billion laughs attack2009-06-08
Bugzilla
CVE-2008-4409 libxml2: infinite loop when entity is used in entity definition2008-10-06
Bugzilla
CVE-2003-1564 libxml2: billion laughs DoS attack2008-09-04
CVE-2003-1564 (MEDIUM CVSS 6.5) | cvebase.io