VDB

CNVD-2022-18354

CNVD-2022-18354 PUBLISHED

Expat是一款使用C语言编写的快速流式XML解析器。 Expat 2.4.5之前存在安全漏洞，攻击者可利用该漏洞通过DTD元素中的较大嵌套深度触发build_model中的堆栈耗尽。

Affected Products

VendorProductVersions
cnvdExpat Expat <2.4.5
Expat Expat <2.4.5

Timeline

  • Feb 22, 2022 CVE ID Reserved
  • Feb 22, 2022 CVE Updated
  • Mar 11, 2022 CVE Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›