The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libxml2",
"binary_version": "2.9.1+dfsg1-3ubuntu4.5"
},
{
"binary_name": "libxml2-dev",
"binary_version": "2.9.1+dfsg1-3ubuntu4.5"
},
{
"binary_name": "libxml2-utils",
"binary_version": "2.9.1+dfsg1-3ubuntu4.5"
},
{
"binary_name": "python-libxml2",
"binary_version": "2.9.1+dfsg1-3ubuntu4.5"
}
]
}