vulnerability
FreeBSD: VID-5fa90ee6-bc9e-11eb-a287-e0d55e2a8bf9 (CVE-2013-0340): texproc/expat2 -- billion laugh attack
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | May 24, 2021 | Dec 10, 2025 | Dec 10, 2025 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
May 24, 2021
Added
Dec 10, 2025
Modified
Dec 10, 2025
Description
Kurt Seifried reports: So here are the CVE's for the two big ones, libxml2 and expat. Both are affected by the expansion of internal entities (which can be used to consume resources) and external entities (which can cause a denial of service against other services, be used to port scan, etc.). A billion laughs attack is a type of denial-of-service attack which is aimed at parsers of XML documents.
Solution
freebsd-upgrade-package-expat
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.