Total vulnerabilities in the database
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.
| Software | From | Fixed in |
|---|---|---|
| libexpat_project / libexpat | - | 2.4.5 |
| debian / debian_linux | 10.0 | 10.0.x |
| debian / debian_linux | 11.0 | 11.0.x |
| fedoraproject / fedora | 34 | 34.x |
| fedoraproject / fedora | 35 | 35.x |
| oracle / http_server | 12.2.1.3.0 | 12.2.1.3.0.x |
| oracle / http_server | 12.2.1.4.0 | 12.2.1.4.0.x |
| oracle / zfs_storage_appliance_kit | 8.8 | 8.8.x |
| siemens / sinema_remote_connect_server | - | 3.1 |