CVE-2008-3281

Fixed in a distro release EPSS 3%

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.

Published 2008-08-27 · CVE record · OSV

Products: xmlsoft libxml2, apple safari, apple iphone_os, fedoraproject fedora, canonical ubuntu_linux, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_workstation, vmware esx

Distro releases