CVE-2022-25313

6.5MEDIUM

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.

게시됨: 2/18/2022업데이트됨: 5/30/2025

설명

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.

AI 분석AI 기반

영향받는 제품

libexpat_projectlibexpat
debiandebian_linux
10.0
debiandebian_linux
11.0
fedoraprojectfedora
34
fedoraprojectfedora
35
oraclehttp_server
12.2.1.3.0
oraclehttp_server
12.2.1.4.0
oraclezfs_storage_appliance_kit
8.8
siemenssinema_remote_connect_server

참조