CVE-2022-25313

6.5MEDIUM

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.

公開日: 2/18/2022更新日: 5/30/2025
NVDで表示MITREで表示

説明

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.

AI分析AIによる分析

影響を受ける製品

libexpat_projectlibexpat
debiandebian_linux
10.0
debiandebian_linux
11.0
fedoraprojectfedora
34
fedoraprojectfedora
35
oraclehttp_server
12.2.1.3.0
oraclehttp_server
12.2.1.4.0
oraclezfs_storage_appliance_kit
8.8
siemenssinema_remote_connect_server

参照