CVE-2003-1564

Impact:
Moderate
Public Date:
2003-02-02
Bugzilla:
461107: CVE-2003-1564 libxml2: billion laughs DoS attack

The MITRE CVE dictionary describes this issue as:

libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, aka the "billion laughs attack."

Find out more about CVE-2003-1564 from the MITRE CVE dictionary dictionary and NIST NVD.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 2.1 (libxml2) RHSA-2008:0886 2008-09-11

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.