Asymmetric denial of service - ReDoS In libxmljs
Description
libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS) A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version |
|---|---|---|
npm |
Aliases
1. 2. 3. 4.
References
1.