Description

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.

Remediation

References

CVE-2022-25313

Related Vulnerabilities

WordPress Plugin Video Conferencing with Zoom Information Disclosure (3.8.16)

Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2018-18312)

WordPress Plugin Backup Migration Information Disclosure (1.3.5)

Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-39118)

MongoDb Improper Input Validation Vulnerability (CVE-2012-6619)

Severity

Medium

Classification

CVE-2022-25313 CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities