CVE-2018-20843

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).

References

Affected packages

Git / github.com/libexpat/libexpat

Affected ranges

Type: GIT
Repo: https://github.com/libexpat/libexpat
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

d3b78b42a2dcdea98e22625cfff67a49d47e6025

Affected versions

Other

REC1_0

R_1_95_0

R_1_95_2

R_1_95_3

R_1_95_4

R_1_95_5

R_1_95_6

R_1_95_7

R_1_95_8

R_2_0_0

R_2_0_1

R_2_1_0

R_2_1_1

R_2_2_0

R_2_2_1

R_2_2_2

R_2_2_3

R_2_2_4

R_2_2_5

R_2_2_6

V1990307

V19981122

V19981231

V19990109

V19990425

V19990626

V19990709

V19990728

V19991013

V1_0

V1_1

V20000512

beta2

beta3

beta4

jclark-orig

libexpat-alpha-1

sourceforge_init

start

Database specific

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 670.0,
                "function_hash": "10718674393994758979083102855553023681"
            },
            "source": "https://github.com/libexpat/libexpat/commit/d3b78b42a2dcdea98e22625cfff67a49d47e6025",
            "signature_type": "Function",
            "target": {
                "function": "START_TEST",
                "file": "expat/tests/runtests.c"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2018-20843-74406d59"
        },
        {
            "digest": {
                "line_hashes": [
                    "70970158302216444732948686873374648009",
                    "197734145770944038326200234670765972062",
                    "333002349092091346504095730741649465004",
                    "132190683235044997527211951942674695301"
                ],
                "threshold": 0.9
            },
            "source": "https://github.com/libexpat/libexpat/commit/d3b78b42a2dcdea98e22625cfff67a49d47e6025",
            "signature_type": "Line",
            "target": {
                "file": "expat/tests/runtests.c"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2018-20843-ee80e572"
        }
    ]
}