| Package | Affected versions | Patched versions |
|---|---|---|
| libexpat | = 1.95.1= 1.95.2= 1.95.4= 1.95.5= 1.95.6= 1.95.7= 1.95.8= 2.0.0≤ 2.0.1 |
Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free