CVE-2022-25313

6.5MEDIUM

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.

发布于: 2/18/2022更新于: 5/30/2025
在NVD查看在MITRE查看

描述

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.

AI分析AI驱动

受影响产品

libexpat_projectlibexpat
debiandebian_linux
10.0
debiandebian_linux
11.0
fedoraprojectfedora
34
fedoraprojectfedora
35
oraclehttp_server
12.2.1.3.0
oraclehttp_server
12.2.1.4.0
oraclezfs_storage_appliance_kit
8.8
siemenssinema_remote_connect_server

参考资料