| Package | Affected versions | Patched versions |
|---|---|---|
| libexpat | ≥ 2.8.2, < 2.8.4 | 2.8.4 |
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free