An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxml_parse_* functions mishandle XML entities, leading to an infinite loop in which memory allocations occur.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade netcdfUpgrade netcdf-parallel | Jul 30, 2024 | Dec 31, 2019 |
| Suse | — | Upgrade libnetcdf_4_6_1-gnu-hpcUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi4-hpcUpgrade libnetcdf-gnu-mpich-hpcUpgrade libnetcdf-gnu-openmpi4-hpcUpgrade netcdf-gnu-mvapich2-hpcUpgrade netcdf-openmpi3Upgrade netcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf-gnu-openmpi2-hpc-develUpgrade libnetcdf_4_7_3-gnu-mvapich2-hpcUpgrade netcdf-gnu-openmpi2-hpcUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-develUpgrade netcdf-openmpi4Upgrade libnetcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf-openmpi2-devel-staticUpgrade libnetcdf18-openmpi2Upgrade netcdf-gnu-mpich-hpc-develUpgrade netcdf-gnu-hpcUpgrade netcdf_4_6_1-gnu-mpich-hpc-develUpgrade netcdf-gnu-mvapich2-hpc-develUpgrade libnetcdf_4_7_3-gnu-openmpi3-hpcUpgrade netcdf_4_7_4-gnu-hpcUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi3-hpc-develUpgrade libnetcdf13Upgrade netcdf_4_6_1-gnu-hpcUpgrade libnetcdf18Upgrade netcdf-develUpgrade netcdf_4_7_3-gnu-mvapich2-hpcUpgrade netcdf-openmpi2-develUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-devel-staticUpgrade libnetcdf18-openmpi3-32bitUpgrade libnetcdf13-openmpi-32bitUpgrade netcdf_4_7_4-gnu-mvapich2-hpcUpgrade netcdf_4_6_1-gnu-hpc-devel-dataUpgrade netcdf-gnu-openmpi1-hpcUpgrade libnetcdf-gnu-hpcUpgrade netcdf_4_6_1-gnu-mvapich2-hpc-develUpgrade netcdf-devel-staticUpgrade netcdf-openmpiUpgrade libnetcdf13-32bitUpgrade netcdf_4_7_4-gnu-hpc-develUpgrade netcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_7_4-gnu-mvapich2-hpc-develUpgrade libnetcdf18-openmpi4-32bitUpgrade netcdfUpgrade libnetcdf_4_7_4-gnu-openmpi2-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi2-hpcUpgrade libnetcdf-gnu-mvapich2-hpcUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-develUpgrade netcdf_4_7_3-gnu-hpc-develUpgrade libnetcdf-gnu-openmpi1-hpcUpgrade netcdf-gnu-hpc-develUpgrade libnetcdf-gnu-openmpi3-hpcUpgrade netcdf-devel-dataUpgrade netcdf-openmpi-develUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-develUpgrade libnetcdf18-openmpi4Upgrade netcdf_4_7_4-gnu-mvapich2-hpc-devel-staticUpgrade libnetcdf18-openmpi3Upgrade netcdf_4_7_3-gnu-openmpi2-hpcUpgrade libnetcdf_4_7_3-gnu-hpcUpgrade netcdf-openmpi-devel-staticUpgrade libnetcdf_4_6_1-gnu-mpich-hpcUpgrade netcdf_4_6_1-gnu-openmpi2-hpcUpgrade netcdf_4_7_4-gnu-hpc-devel-staticUpgrade netcdf-gnu-openmpi3-hpc-develUpgrade netcdf_4_7_4-gnu-openmpi3-hpcUpgrade netcdf_4_7_3-gnu-mpich-hpc-devel-staticUpgrade netcdf-gnu-openmpi4-hpcUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-devel-staticUpgrade netcdf-gnu-openmpi1-hpc-develUpgrade netcdf_4_6_1-gnu-openmpi1-hpcUpgrade libnetcdf-gnu-openmpi2-hpcUpgrade netcdf_4_7_3-gnu-openmpi3-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-hpc-devel-staticUpgrade netcdf_4_7_4-gnu-openmpi2-hpc-devel-staticUpgrade libnetcdf_4_7_4-gnu-openmpi3-hpcUpgrade libnetcdf13-openmpiUpgrade netcdf-openmpi3-develUpgrade netcdf_4_7_3-gnu-hpcUpgrade netcdf-openmpi-devel-dataUpgrade netcdf-openmpi4-devel-staticUpgrade libnetcdf_4_6_1-gnu-mvapich2-hpcUpgrade libnetcdf_4_7_4-gnu-hpcUpgrade libnetcdf18-openmpi2-32bitUpgrade netcdf-openmpi3-devel-staticUpgrade netcdf-openmpi2Upgrade netcdf_4_6_1-gnu-mvapich2-hpcUpgrade netcdf_4_7_3-gnu-openmpi3-hpcUpgrade netcdf_4_7_4-gnu-mpich-hpc-devel-staticUpgrade libnetcdf_4_7_4-gnu-openmpi4-hpcUpgrade libnetcdf_4_7_4-gnu-mvapich2-hpcUpgrade netcdf-gnu-mpich-hpcUpgrade netcdf_4_7_3-gnu-openmpi2-hpc-develUpgrade netcdf_4_6_1-gnu-mpich-hpc-devel-staticUpgrade netcdf-openmpi4-develUpgrade libnetcdf18-32bitUpgrade libnetcdf_4_6_1-gnu-openmpi1-hpcUpgrade libnetcdf_4_6_1-gnu-openmpi2-hpcUpgrade netcdf_4_7_4-gnu-openmpi4-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-hpc-devel-staticUpgrade netcdf_4_6_1-gnu-openmpi1-hpc-devel-staticUpgrade netcdf-gnu-openmpi3-hpcUpgrade libnetcdf_4_7_4-gnu-mpich-hpcUpgrade netcdf_4_6_1-gnu-openmpi2-hpc-develUpgrade netcdf_4_7_4-gnu-mpich-hpc-develUpgrade netcdf_4_7_3-gnu-mvapich2-hpc-devel-staticUpgrade netcdf_4_7_3-gnu-mpich-hpc-develUpgrade netcdf_4_7_3-gnu-mpich-hpcUpgrade netcdf_4_6_1-gnu-hpc-develUpgrade netcdf-gnu-openmpi4-hpc-develUpgrade libnetcdf_4_7_3-gnu-openmpi2-hpc | Nov 26, 2021 | Dec 31, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub