Description
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.
Exploits (2)
nomisec
WRITEUP
by Trinadh465 · poc
https://github.com/Trinadh465/external_expat-2.1.0_CVE-2022-25313
nomisec
WRITEUP
by ShaikUsaf · poc
https://github.com/ShaikUsaf/external_expact_AOSP10_r33_CVE-2022-25313
References (10)
Scores
CVSS v3
6.5
EPSS
0.0013
EPSS Percentile
32.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-674
Status
published
Products (9)
debian/debian_linux
10.0
debian/debian_linux
11.0
fedoraproject/fedora
34
fedoraproject/fedora
35
libexpat_project/libexpat
< 2.4.5
oracle/http_server
12.2.1.3.0
oracle/http_server
12.2.1.4.0
oracle/zfs_storage_appliance_kit
8.8
siemens/sinema_remote_connect_server
< 3.1
Published
Feb 18, 2022
Tracked Since
Feb 18, 2026