CVE-2013-0340 expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of se...
MediumCVSS 6.8
EPSS 19.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/expat(Debian:12) | < 2.4.1-2 | 2.4.1-2 |
| debian/expat(Debian:13) | < 2.4.1-2 | 2.4.1-2 |
| debian/expat(Debian:14) | < 2.4.1-2 | 2.4.1-2 |
| debian/libxmltok(Debian:12) | All versions | No fix listed |
| debian/libxmltok(Debian:12) | = 1.2-4 | No fix listed |
| debian/libxmltok(Debian:12) | = 1.2-4.1 | No fix listed |
| debian/libxmltok(Debian:12) | = 1.2-4.1~exp1 | No fix listed |
| debian/libxmltok(Debian:12) | = 1.2-4.2 | No fix listed |
| libexpat | < 2.4.0 | 2.4.0 |
| Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.0, < V3.1.5 | V3.1.5 |
| Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | >= V3.1.0, < V3.1.5 | V3.1.5 |
| Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.0, < V3.1.5 | V3.1.5 |
| libexpat project libexpat | < 2.4.0 | 2.4.0 |
| python | >= 3.6.0, < 3.6.15 | 3.6.15 |
| python | >= 3.7.0, < 3.7.12 | 3.7.12 |
| python | >= 3.8.0, < 3.8.12 | 3.8.12 |
| python | >= 3.9.0, < 3.9.7 | 3.9.7 |
| apple iPadOS | < 14.8 | 14.8 |
| apple iphone os | < 14.8 | 14.8 |
| apple macos | < 11.6 | 11.6 |
| apple tvOS | < 15.0 | 15.0 |
| apple watchOS | < 8.0 | 8.0 |
References
- Debian Security Tracker CVE-2013-0340 vendor-advisory
- [oss-security] 20130221 CVEs for libxml2 and expat internal and external XML entity expansion exploit mailing-list third-party-advisory
- [oss-security] 20130413 Re-evaluating expat/libxml2 CVE assignments mailing-list third-party-advisory
- 90634 broken-link vdb-entry
- 1028213 third-party-advisory vdb-entry
- GLSA-201701-21 third-party-advisory vendor-advisory
- 58233 broken-link third-party-advisory vdb-entry
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- 20210921 APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15 mailing-list third-party-advisory
- 20210921 APPLE-SA-2021-09-20-2 watchOS 8 mailing-list third-party-advisory
- 20210921 APPLE-SA-2021-09-20-8 Additional information for APPLE-SA-2021-09-13-4 Security Update 2021-005 Catalina mailing-list third-party-advisory
- 20210921 APPLE-SA-2021-09-20-3 tvOS 15 mailing-list third-party-advisory
- 20210921 APPLE-SA-2021-09-20-6 Additional information for APPLE-SA-2021-09-13-1 iOS 14.8 and iPadOS 14.8 mailing-list third-party-advisory
- 20210921 APPLE-SA-2021-09-20-7 Additional information for APPLE-SA-2021-09-13-3 macOS Big Sur 11.6 mailing-list third-party-advisory
- [announce] 20211007 CVE-2021-40439: Apache OpenOffice: Billion Laughs mailing-list
- [openoffice-users] 20211007 CVE-2021-40439: Apache OpenOffice: Billion Laughs mailing-list
- [oss-security] 20211007 CVE-2021-40439: Apache OpenOffice: Billion Laughs mailing-list third-party-advisory
- 20211027 APPLE-SA-2021-10-26-10 Additional information for APPLE-SA-2021-09-20-2 watchOS 8 mailing-list third-party-advisory
- 20211027 APPLE-SA-2021-10-26-11 Additional information for APPLE-SA-2021-09-20-3 tvOS 15 mailing-list third-party-advisory
- 20211027 APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15 mailing-list third-party-advisory
- Expat 2.4.0 and 2.4.1 Changelog
- cert-portal.siemens.com
- bugs.debian.org issue-tracking