In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-02-18T04:23:04
Updated: 2024-08-03T04:36:06.700Z
Reserved: 2022-02-18T00:00:00
Link: CVE-2022-25313
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-02-18T05:15:08.130
Modified: 2024-11-21T06:51:58.680
Link: CVE-2022-25313
Redhat