CVE-2014-3660

parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the billion laughs attack.

Affected Software

Name	Vendor	Start Version	End Version
Libxml2	Xmlsoft	2.0.0	2.0.0
Libxml2	Xmlsoft	2.1.0	2.1.0
Libxml2	Xmlsoft	2.1.1	2.1.1
Libxml2	Xmlsoft	2.2.0	2.2.0
Libxml2	Xmlsoft	2.2.0	2.2.0
Libxml2	Xmlsoft	2.2.1	2.2.1
Libxml2	Xmlsoft	2.2.2	2.2.2
Libxml2	Xmlsoft	2.2.3	2.2.3
Libxml2	Xmlsoft	2.2.4	2.2.4
Libxml2	Xmlsoft	2.2.5	2.2.5
Libxml2	Xmlsoft	2.2.6	2.2.6
Libxml2	Xmlsoft	2.2.7	2.2.7
Libxml2	Xmlsoft	2.2.8	2.2.8
Libxml2	Xmlsoft	2.2.9	2.2.9
Libxml2	Xmlsoft	2.2.10	2.2.10
Libxml2	Xmlsoft	2.2.11	2.2.11
Libxml2	Xmlsoft	2.3.0	2.3.0
Libxml2	Xmlsoft	2.3.1	2.3.1
Libxml2	Xmlsoft	2.3.2	2.3.2
Libxml2	Xmlsoft	2.3.3	2.3.3
Libxml2	Xmlsoft	2.3.4	2.3.4
Libxml2	Xmlsoft	2.3.5	2.3.5
Libxml2	Xmlsoft	2.3.6	2.3.6
Libxml2	Xmlsoft	2.3.7	2.3.7
Libxml2	Xmlsoft	2.3.8	2.3.8
Libxml2	Xmlsoft	2.3.9	2.3.9
Libxml2	Xmlsoft	2.3.10	2.3.10
Libxml2	Xmlsoft	2.3.11	2.3.11
Libxml2	Xmlsoft	2.3.12	2.3.12
Libxml2	Xmlsoft	2.3.13	2.3.13
Libxml2	Xmlsoft	2.3.14	2.3.14
Libxml2	Xmlsoft	2.4.1	2.4.1
Libxml2	Xmlsoft	2.4.2	2.4.2
Libxml2	Xmlsoft	2.4.3	2.4.3
Libxml2	Xmlsoft	2.4.4	2.4.4
Libxml2	Xmlsoft	2.4.5	2.4.5
Libxml2	Xmlsoft	2.4.6	2.4.6
Libxml2	Xmlsoft	2.4.7	2.4.7
Libxml2	Xmlsoft	2.4.8	2.4.8
Libxml2	Xmlsoft	2.4.9	2.4.9
Libxml2	Xmlsoft	2.4.10	2.4.10
Libxml2	Xmlsoft	2.4.11	2.4.11
Libxml2	Xmlsoft	2.4.12	2.4.12
Libxml2	Xmlsoft	2.4.13	2.4.13
Libxml2	Xmlsoft	2.4.14	2.4.14
Libxml2	Xmlsoft	2.4.15	2.4.15
Libxml2	Xmlsoft	2.4.16	2.4.16
Libxml2	Xmlsoft	2.4.17	2.4.17
Libxml2	Xmlsoft	2.4.18	2.4.18
Libxml2	Xmlsoft	2.4.19	2.4.19
Libxml2	Xmlsoft	2.4.20	2.4.20
Libxml2	Xmlsoft	2.4.21	2.4.21
Libxml2	Xmlsoft	2.4.22	2.4.22
Libxml2	Xmlsoft	2.4.23	2.4.23
Libxml2	Xmlsoft	2.4.24	2.4.24
Libxml2	Xmlsoft	2.4.25	2.4.25
Libxml2	Xmlsoft	2.4.26	2.4.26
Libxml2	Xmlsoft	2.4.27	2.4.27
Libxml2	Xmlsoft	2.4.28	2.4.28
Libxml2	Xmlsoft	2.4.29	2.4.29
Libxml2	Xmlsoft	2.4.30	2.4.30
Libxml2	Xmlsoft	2.5.0	2.5.0
Libxml2	Xmlsoft	2.5.4	2.5.4
Libxml2	Xmlsoft	2.5.7	2.5.7
Libxml2	Xmlsoft	2.5.8	2.5.8
Libxml2	Xmlsoft	2.5.10	2.5.10
Libxml2	Xmlsoft	2.5.11	2.5.11
Libxml2	Xmlsoft	2.6.0	2.6.0
Libxml2	Xmlsoft	2.6.1	2.6.1
Libxml2	Xmlsoft	2.6.2	2.6.2
Libxml2	Xmlsoft	2.6.3	2.6.3
Libxml2	Xmlsoft	2.6.4	2.6.4
Libxml2	Xmlsoft	2.6.5	2.6.5
Libxml2	Xmlsoft	2.6.6	2.6.6
Libxml2	Xmlsoft	2.6.7	2.6.7
Libxml2	Xmlsoft	2.6.8	2.6.8
Libxml2	Xmlsoft	2.6.9	2.6.9
Libxml2	Xmlsoft	2.6.11	2.6.11
Libxml2	Xmlsoft	2.6.12	2.6.12
Libxml2	Xmlsoft	2.6.13	2.6.13
Libxml2	Xmlsoft	2.6.14	2.6.14
Libxml2	Xmlsoft	2.6.16	2.6.16
Libxml2	Xmlsoft	2.6.17	2.6.17
Libxml2	Xmlsoft	2.6.18	2.6.18
Libxml2	Xmlsoft	2.6.20	2.6.20
Libxml2	Xmlsoft	2.6.21	2.6.21
Libxml2	Xmlsoft	2.6.22	2.6.22
Libxml2	Xmlsoft	2.6.23	2.6.23
Libxml2	Xmlsoft	2.6.24	2.6.24
Libxml2	Xmlsoft	2.6.25	2.6.25
Libxml2	Xmlsoft	2.6.26	2.6.26
Libxml2	Xmlsoft	2.6.27	2.6.27
Libxml2	Xmlsoft	2.6.28	2.6.28
Libxml2	Xmlsoft	2.6.29	2.6.29
Libxml2	Xmlsoft	2.6.30	2.6.30
Libxml2	Xmlsoft	2.6.31	2.6.31
Libxml2	Xmlsoft	2.6.32	2.6.32
Libxml2	Xmlsoft	2.7.0	2.7.0
Libxml2	Xmlsoft	2.7.1	2.7.1
Libxml2	Xmlsoft	2.7.2	2.7.2
Libxml2	Xmlsoft	2.7.3	2.7.3
Libxml2	Xmlsoft	2.7.4	2.7.4
Libxml2	Xmlsoft	2.7.5	2.7.5
Libxml2	Xmlsoft	2.7.6	2.7.6
Libxml2	Xmlsoft	2.7.7	2.7.7
Libxml2	Xmlsoft	2.7.8	2.7.8
Libxml2	Xmlsoft	2.8.0	2.8.0
Libxml2	Xmlsoft	2.9.0	2.9.0
Libxml2	Xmlsoft	2.9.0	2.9.0
Libxml2	Xmlsoft	*	2.9.1
Red Hat Enterprise Linux 5	RedHat	libxml2-0:2.6.26-2.1.25.el5_11	*
Red Hat Enterprise Linux 6	RedHat	libxml2-0:2.7.6-17.el6_6.1	*
Red Hat Enterprise Linux 7	RedHat	libxml2-0:2.9.1-5.el7_0.1	*
Libxml2	Ubuntu	devel	*
Libxml2	Ubuntu	lucid	*
Libxml2	Ubuntu	precise	*
Libxml2	Ubuntu	trusty	*
Libxml2	Ubuntu	trusty/esm	*
Libxml2	Ubuntu	upstream	*
Libxml2	Ubuntu	utopic	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-3660
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References