CVE-2013-1864

No fix known EPSS 3%

The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted PXML document containing a large number of nested entity references, aka a "billion laughs attack."

Published 2014-05-23 · CVE record · OSV

Products: opalvoip portable_tool_library, ekiga, suse_linux_enterprise_software_development_kit, suse_linux_enterprise_desktop