CVE-2021-40439CWE-611

Billion Laughs

published October 7, 2021

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

Apache OpenOffice has a dependency on expat software. Versions prior to 2.1.0 were subject to CVE-2013-0340 a "Billion Laughs" entity expansion denial of service attack and exploit via crafted XML files. ODF files consist of a set of XML files. All versions of Apache OpenOffice up to 4.1.10 are subject to this issue. expat in version 4.1.11 is patched.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03866 · 90.1th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2021-10-07T15:50Z
EPSS history
Timeline
  • 07 OCT 15:50Z
    Billion Laughs
    cvelistv5