Red Hat Security AdvisoryRHSA-2020:4484
expat security update
Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) expat-2.2.5-4.el8, expat-devel-2.2.5-4.el8
Fixes 2 records
Priority MEDIUM 49
In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for de…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.07107 · Published 2019-06-24 · Partial fix CWE-611
Priority MEDIUM 42
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06643 · Published 2019-09-04 · Partial fix CWE-125
