CVE Vulnerabilities

CVE-2019-20198

Uncontrolled Recursion

Published: Dec 31, 2019 | Modified: Nov 21, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
LOW

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_ent_ok() mishandles recursion, leading to stack consumption for a crafted XML file.

Weakness

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Affected Software

Name Vendor Start Version End Version
Ezxml Ezxml_project 0.8.3 (including) 0.8.6 (including)
Mapcache Ubuntu bionic *
Mapcache Ubuntu devel *
Mapcache Ubuntu esm-apps/bionic *
Mapcache Ubuntu esm-apps/focal *
Mapcache Ubuntu esm-apps/jammy *
Mapcache Ubuntu esm-apps/noble *
Mapcache Ubuntu esm-apps/xenial *
Mapcache Ubuntu focal *
Mapcache Ubuntu groovy *
Mapcache Ubuntu hirsute *
Mapcache Ubuntu impish *
Mapcache Ubuntu jammy *
Mapcache Ubuntu kinetic *
Mapcache Ubuntu lunar *
Mapcache Ubuntu mantic *
Mapcache Ubuntu noble *
Mapcache Ubuntu oracular *
Mapcache Ubuntu plucky *
Mapcache Ubuntu questing *
Mapcache Ubuntu trusty *
Mapcache Ubuntu upstream *
Mapcache Ubuntu xenial *
Navit Ubuntu bionic *
Navit Ubuntu focal *
Navit Ubuntu groovy *
Navit Ubuntu hirsute *
Navit Ubuntu impish *
Navit Ubuntu kinetic *
Navit Ubuntu lunar *
Navit Ubuntu mantic *
Navit Ubuntu oracular *
Navit Ubuntu trusty *
Navit Ubuntu xenial *
Netcdf Ubuntu bionic *
Netcdf Ubuntu esm-apps/focal *
Netcdf Ubuntu esm-apps/jammy *
Netcdf Ubuntu focal *
Netcdf Ubuntu groovy *
Netcdf Ubuntu hirsute *
Netcdf Ubuntu impish *
Netcdf Ubuntu jammy *
Netcdf Ubuntu kinetic *
Netcdf Ubuntu lunar *
Netcdf Ubuntu mantic *
Netcdf Ubuntu trusty *
Netcdf Ubuntu trusty/esm *
Netcdf Ubuntu upstream *
Netcdf Ubuntu xenial *
Netcdf-parallel Ubuntu esm-apps/focal *
Netcdf-parallel Ubuntu esm-apps/jammy *
Netcdf-parallel Ubuntu focal *
Netcdf-parallel Ubuntu groovy *
Netcdf-parallel Ubuntu hirsute *
Netcdf-parallel Ubuntu impish *
Netcdf-parallel Ubuntu jammy *
Netcdf-parallel Ubuntu kinetic *
Netcdf-parallel Ubuntu lunar *
Netcdf-parallel Ubuntu mantic *
Netcdf-parallel Ubuntu oracular *
Netcdf-parallel Ubuntu trusty *
Netcdf-parallel Ubuntu upstream *
Netcdf-parallel Ubuntu xenial *
Scilab Ubuntu bionic *
Scilab Ubuntu devel *
Scilab Ubuntu esm-apps/bionic *
Scilab Ubuntu esm-apps/focal *
Scilab Ubuntu esm-apps/jammy *
Scilab Ubuntu esm-apps/noble *
Scilab Ubuntu focal *
Scilab Ubuntu groovy *
Scilab Ubuntu hirsute *
Scilab Ubuntu impish *
Scilab Ubuntu jammy *
Scilab Ubuntu kinetic *
Scilab Ubuntu lunar *
Scilab Ubuntu mantic *
Scilab Ubuntu noble *
Scilab Ubuntu oracular *
Scilab Ubuntu plucky *
Scilab Ubuntu questing *
Scilab Ubuntu trusty *
Scilab Ubuntu xenial *

Potential Mitigations

References