CVE-2003-1564

MediumCVSS 6.5/10Last modified Jun 16, 2026

Description

libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, aka the "billion laughs attack."

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-776

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://mail.gnome.org/archives/xml/2008-August/msg00034.htmlMailing List, Patch
http://secunia.com/advisories/31868Broken Link
http://www.reddit.com/r/programming/comments/65843/time_to_upgrade_libxml2Issue Tracking
http://www.redhat.com/support/errata/RHSA-2008-0886.htmlBroken Link
http://www.stylusstudio.com/xmldev/200302/post20020.htmlBroken Link
http://xmlsoft.org/news.htmlRelease Notes
http://mail.gnome.org/archives/xml/2008-August/msg00034.htmlMailing List, Patch
http://secunia.com/advisories/31868Broken Link
http://www.reddit.com/r/programming/comments/65843/time_to_upgrade_libxml2Issue Tracking
http://www.redhat.com/support/errata/RHSA-2008-0886.htmlBroken Link
http://www.stylusstudio.com/xmldev/200302/post20020.htmlBroken Link
http://xmlsoft.org/news.htmlRelease Notes

Timeline

Published: Dec 31, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-15665.0Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain s CVE-2003-15677.5The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body o CVE-2003-15685.0GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an inval CVE-2003-15695.0GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP req CVE-2003-15703.5The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the s CVE-2003-15715.0Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to dow CVE-2003-15729.3Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unaut CVE-2003-157310.0The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary program CVE-2003-15747.5TikiWiki 1.6.1 allows remote attackers to bypass authentication by entering a valid username with an arbitrary password, possibly related to CVE-2003-15754.6VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inher CVE-2003-157610.0Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on the sparc platform all CVE-2003-15772.6Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote