CVE-2013-0340
CVE-2013-0340
| Published Date | 2014-01-21 |
|---|---|
| Product | centos |
| Severity | Medium (4.3) |
| Component | expat |
| Affected Versions | CentOS 7 |
| Patched Versions | expat-2.1.0-15_ol007.el7 |
CVE Details
OL CVE Issue Summary
expat before 2.4.0 does not enforce an amplification limit for nested internal entity expansion. A crafted XML document can expand a small input into a much larger output and cause denial of service through resource consumption (Billion Laughs).