NVD

Id
36684  
Name
CVE-2013-0338  
Description
libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-04-25  
Modified Date
2016-06-16  
Seq
2013-0338  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187481 36684 CVE-2013-0338 SUSE-SU-2013:1627  View
187482 36684 CVE-2013-0338 openSUSE-SU-2013:0552  View
187483 36684 CVE-2013-0338 openSUSE-SU-2013:0555  View
187484 36684 CVE-2013-0338 SSRT101996  View
187485 36684 CVE-2013-0338 DSA-2652  View
187486 36684 CVE-2013-0338 MDVSA-2013:056  View
187487 36684 CVE-2013-0338 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
187488 36684 CVE-2013-0338 USN-1782-1  View
187489 36684 CVE-2013-0338 https://bugzilla.redhat.com/show_bug.cgi?id=912400  View
187490 36684 CVE-2013-0338 https://git.gnome.org/browse/libxml2/commit/?id=23f05e0c33987d6605387b300c4be5da2120a7ab  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20904 JVNDB-2013-002479 libxml2 におけるサービス運用妨害 (DoS) の脆弱性 libxml2 には、サービス運用妨害 (CPU およびメモリ消費) となる脆弱性が存在します。 CVE-2013-0338 60280 CVE-2013-0338 36684 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002479.html 2013-02-19 2015-01-22 View