CVE-2017-16932

High

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

mitre·CWE-835·Published 2017-11-23

CVSS

7.5

EPSS

0.06

KEV

Exploits

cve.orgen

91 chars

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

OSV.deven

91 chars

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

GHSAen

91 chars

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

NVDes

116 chars

parser.c en libxml2 en versiones anteriores a la 2.9.5 no evita la recursión infinita en las entidades de parámetro.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P
3.0	Primary	NVD	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	GHSA	7.5	—	—	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H