libxml2: denial of service
| Package(s): | libxml2 |
CVE #(s): | CVE-2014-0191
|
| Created: | May 12, 2014 |
Updated: | April 1, 2015 |
| Description: |
From the Mageia advisory:
It was discovered that libxml2, a library providing support to read,
modify and write XML files, incorrectly performs entity substitution in
the doctype prolog, even if the application using libxml2 disabled any
entity substitution. A remote attacker could provide a
specially-crafted XML file that, when processed, would lead to the
exhaustion of CPU and memory resources or file descriptors |
| Alerts: |
|