Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Libxml2 递归实体 拒绝服务漏洞
Vulnerability Description
libxml2软件包提供允许用户操控XML文件的函数库,包含有读、修改和写XML和HTML文件支持。 Libxml2 2.6.32及其以下版本在解析某些XML内容时没有正确地检查递归深度,使用Libxml2库的应用程序在处理特制XML文档时可能会耗尽所有可用的内存和CPU资源。
CVSS Information
N/A
Vulnerability Type
N/A