Description

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).

Remediation

References

CVE-2018-20843

Related Vulnerabilities

OpenSSL Cryptographic Issues Vulnerability (CVE-2013-6450)

ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5865)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5335)

Oracle Application Server Other Vulnerability (CVE-2006-5356)

MySQL CVE-2015-4767 Vulnerability (CVE-2015-4767)

Severity

High

Classification

CVE-2018-20843 CWE-611 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities