CVE-2003-1564

libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of…

published September 2, 2008

CVSS
—
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, aka the "billion laughs attack."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01619 · 75.7th percentile
Published
2008-09-02T14:00Z
EPSS history
Timeline
  • 02 SEP 14:00Z
    libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of…
    cvelistv5