Mmastodon TechnologyCybersecurity first seen 5 d ago, last 5 d ago, peak #10

XML external entity flaw flagged in libexpat 2.2.0 and earlier

Original: 🚨 EUVD-2017-18171 📊 Score: n/a 📅 Published: 2017-07-25 | Updated: 2026-10-08 📝 XML External Entity vulnerability in libe

A security advisory, EUVD-2017-18171, describes an XML external entity vulnerability in the Expat XML parser library, affecting libexpat version 2.2.0 and earlier. Attackers can supply a malformed external entity definition that forces the parser into an infinite loop, causing denial of service. The advisory was originally published in July 2017 and was recently updated, renewing attention on systems still running unpatched versions of the widely used library.

Why now: The advisory record was recently updated, prompting renewed attention to the long-standing libexpat vulnerability.

libexpatExpat XML Parser LibraryEUVD-2017-18171

Open on mastodon →

Evidence

• 🚨 EUVD-2017-18171 📊 Score: n/a 📅 Published: 2017-07-25 | Updated: 2026-10-08 📝 XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1535382