Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.

CVEs (85)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-3288 1Cisco 1Unified Presence Apr 29, 2026 Oct 6, 2011 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XM...Show more Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large number of nested entity references, aka Bug IDs CSCtq89842 and CSCtq88547, a similar issue to CVE-2003-1564.Show less
CVE-2011-1755 3Apple FedoraprojectJabberd2 4Fedora Jabberd2Mac Os X+1 more Apr 29, 2026 Jun 21, 2011 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large num...Show more jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.Show less
CVE-2009-1955 7Apache AppleCanonical+4 more 8Apr Util Debian LinuxFedora+5 more Apr 23, 2026 Jun 8, 2009 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of ser...Show more The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.Show less
CVE-2008-3281 7Apple CanonicalDebian+4 more 11Debian Linux Enterprise Linux DesktopEnterprise Linux Eus+8 more Apr 23, 2026 Aug 27, 2008 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafte...Show more libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.Show less
CVE-2003-1564 1Xmlsoft 1Libxml2 Apr 16, 2026 Dec 31, 2003 N/A· v4 6.5 MEDIUM· v3 9.3 HIGH· v2 libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document co...Show more libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, aka the "billion laughs attack."Show less

Previous 1 2 3 45