CVE-2013-0339

First published: Mon Feb 25 2013(Updated: )

A denial of service flaw was found in the way libxml2, a library providing support to read, modify and write XML and HTML files, performed string substitutions when entity values for external entity references replacement (--noent option) was requested / enabled during the XML file parsing. A remote attacker could provide a specially-crafted XML file containing an external entity expansion, when processed would lead to excessive CPU consumption (denial of service). This a different flaw from <a href="https://access.redhat.com/security/cve/CVE-2013-0338">CVE-2013-0338</a>. Upstream patch: <a href="http://git.gnome.org/browse/libxml2/commit/?id=23f05e0c33987d6605387b300c4be5da2120a7ab">http://git.gnome.org/browse/libxml2/commit/?id=23f05e0c33987d6605387b300c4be5da2120a7ab</a>

Credit: secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/softwarecombine
• agent/first-publish-date
• collector/nvd-index
• agent/software-canonical-lookup-request
• agent/references
• agent/weakness
• agent/severity
• agent/remedy
• agent/author
• agent/status
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/description
• agent/event
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2013-0339
• agent/tags
• agent/trending
• status/rejected
• vendor/xmlsoft
• canonical/xmlsoft libxml2
• version/xmlsoft libxml2/2.9.1
• version/xmlsoft libxml2/1.7.0
• version/xmlsoft libxml2/1.7.1
• version/xmlsoft libxml2/1.7.2
• version/xmlsoft libxml2/1.7.3
• version/xmlsoft libxml2/1.7.4
• version/xmlsoft libxml2/1.8.0
• version/xmlsoft libxml2/1.8.1
• version/xmlsoft libxml2/1.8.2
• version/xmlsoft libxml2/1.8.3
• version/xmlsoft libxml2/1.8.4
• version/xmlsoft libxml2/1.8.5
• version/xmlsoft libxml2/1.8.6
• version/xmlsoft libxml2/1.8.7
• version/xmlsoft libxml2/1.8.9
• version/xmlsoft libxml2/1.8.10
• version/xmlsoft libxml2/1.8.13
• version/xmlsoft libxml2/1.8.14
• version/xmlsoft libxml2/1.8.16
• version/xmlsoft libxml2/2.0.0
• version/xmlsoft libxml2/2.1.0
• version/xmlsoft libxml2/2.1.1
• version/xmlsoft libxml2/2.2.0
• version/xmlsoft libxml2/2.2.0-beta
• version/xmlsoft libxml2/2.2.1
• version/xmlsoft libxml2/2.2.2
• version/xmlsoft libxml2/2.2.3
• version/xmlsoft libxml2/2.2.4
• version/xmlsoft libxml2/2.2.5
• version/xmlsoft libxml2/2.2.6
• version/xmlsoft libxml2/2.2.7
• version/xmlsoft libxml2/2.2.8
• version/xmlsoft libxml2/2.2.9
• version/xmlsoft libxml2/2.2.10
• version/xmlsoft libxml2/2.2.11
• version/xmlsoft libxml2/2.3.0
• version/xmlsoft libxml2/2.3.1
• version/xmlsoft libxml2/2.3.2
• version/xmlsoft libxml2/2.3.3
• version/xmlsoft libxml2/2.3.4
• version/xmlsoft libxml2/2.3.5
• version/xmlsoft libxml2/2.3.6
• version/xmlsoft libxml2/2.3.7
• version/xmlsoft libxml2/2.3.8
• version/xmlsoft libxml2/2.3.9
• version/xmlsoft libxml2/2.3.10
• version/xmlsoft libxml2/2.3.11
• version/xmlsoft libxml2/2.3.12
• version/xmlsoft libxml2/2.3.13
• version/xmlsoft libxml2/2.3.14
• version/xmlsoft libxml2/2.4.1
• version/xmlsoft libxml2/2.4.2
• version/xmlsoft libxml2/2.4.3
• version/xmlsoft libxml2/2.4.4
• version/xmlsoft libxml2/2.4.5
• version/xmlsoft libxml2/2.4.6
• version/xmlsoft libxml2/2.4.7
• version/xmlsoft libxml2/2.4.8
• version/xmlsoft libxml2/2.4.9
• version/xmlsoft libxml2/2.4.10
• version/xmlsoft libxml2/2.4.11
• version/xmlsoft libxml2/2.4.12
• version/xmlsoft libxml2/2.4.13
• version/xmlsoft libxml2/2.4.14
• version/xmlsoft libxml2/2.4.15
• version/xmlsoft libxml2/2.4.16
• version/xmlsoft libxml2/2.4.17
• version/xmlsoft libxml2/2.4.18
• version/xmlsoft libxml2/2.4.19
• version/xmlsoft libxml2/2.4.20
• version/xmlsoft libxml2/2.4.21
• version/xmlsoft libxml2/2.4.22
• version/xmlsoft libxml2/2.4.23
• version/xmlsoft libxml2/2.4.24
• version/xmlsoft libxml2/2.4.25
• version/xmlsoft libxml2/2.4.26
• version/xmlsoft libxml2/2.4.27
• version/xmlsoft libxml2/2.4.28
• version/xmlsoft libxml2/2.4.29
• version/xmlsoft libxml2/2.4.30
• version/xmlsoft libxml2/2.5.0
• version/xmlsoft libxml2/2.5.4
• version/xmlsoft libxml2/2.5.7
• version/xmlsoft libxml2/2.5.8
• version/xmlsoft libxml2/2.5.10
• version/xmlsoft libxml2/2.5.11
• version/xmlsoft libxml2/2.6.0
• version/xmlsoft libxml2/2.6.1
• version/xmlsoft libxml2/2.6.2
• version/xmlsoft libxml2/2.6.3
• version/xmlsoft libxml2/2.6.4
• version/xmlsoft libxml2/2.6.5
• version/xmlsoft libxml2/2.6.6
• version/xmlsoft libxml2/2.6.7
• version/xmlsoft libxml2/2.6.8
• version/xmlsoft libxml2/2.6.9
• version/xmlsoft libxml2/2.6.11
• version/xmlsoft libxml2/2.6.12
• version/xmlsoft libxml2/2.6.13
• version/xmlsoft libxml2/2.6.14
• version/xmlsoft libxml2/2.6.16
• version/xmlsoft libxml2/2.6.17
• version/xmlsoft libxml2/2.6.18
• version/xmlsoft libxml2/2.6.20
• version/xmlsoft libxml2/2.6.21
• version/xmlsoft libxml2/2.6.22
• version/xmlsoft libxml2/2.6.23
• version/xmlsoft libxml2/2.6.24
• version/xmlsoft libxml2/2.6.25
• version/xmlsoft libxml2/2.6.26
• version/xmlsoft libxml2/2.6.27
• version/xmlsoft libxml2/2.6.28
• version/xmlsoft libxml2/2.6.29
• version/xmlsoft libxml2/2.6.30
• version/xmlsoft libxml2/2.6.31
• version/xmlsoft libxml2/2.6.32
• version/xmlsoft libxml2/2.7.0
• version/xmlsoft libxml2/2.7.1
• version/xmlsoft libxml2/2.7.2
• version/xmlsoft libxml2/2.7.3
• version/xmlsoft libxml2/2.7.4
• version/xmlsoft libxml2/2.7.5
• version/xmlsoft libxml2/2.7.6
• version/xmlsoft libxml2/2.7.7
• version/xmlsoft libxml2/2.7.8
• version/xmlsoft libxml2/2.8.0
• version/xmlsoft libxml2/2.9.0
• version/xmlsoft libxml2/2.9.0-rc1
• vendor/canonical
• canonical/canonical ubuntu linux
• version/canonical ubuntu linux/10.04
• version/canonical ubuntu linux/12.04
• version/canonical ubuntu linux/12.10
• version/canonical ubuntu linux/13.04
• vendor/debian
• canonical/debian debian linux
• version/debian debian linux/6.0
• version/debian debian linux/7.0
• vendor/suse
• canonical/suse linux enterprise server
• version/suse linux enterprise server/10-sp4