Debian/expat: high 7.5
The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an X
Action: Upgrade expat to 2.1.1-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.1-3 | - |
Fixed versions
| 2.1.1-3 |
Sources
published · modified · JSON