Search for packages
| purl | pkg:nuget/libxml2@2.0.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-xagn-uq6u-aaaj
Aliases: CVE-2014-3660 |
Uncontrolled Resource Consumption parser.c in libxml2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the "billion laughs" attack. |
Affected by 49 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:46:36.721224+00:00 | GitLab Importer | Affected by | VCID-xagn-uq6u-aaaj | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libxml2/CVE-2014-3660.yml | 34.0.1 |
| 2024-01-03T18:07:50.901259+00:00 | GitLab Importer | Affected by | VCID-xagn-uq6u-aaaj | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libxml2/CVE-2014-3660.yml | 34.0.0rc1 |