Description

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).

Remediation

References

CVE-2018-20843

Related Vulnerabilities

Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-1944)

MySQL CVE-2016-5443 Vulnerability (CVE-2016-5443)

WordPress Plugin The Events Calendar:Eventbrite Tickets Cross-Site Scripting (3.9.6)

WordPress Plugin Cookie Consent for WP-Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) CSV Injection (2.2.5)

WordPress Plugin WordPress Facebook SQL Injection (1.0.8)

Severity

High

Classification

CVE-2018-20843 CWE-611 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities