TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service.
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tinyxml | Tinyxml_project | 2.3.2 (including) | 2.6.2 (including) |
| Tinyxml | Tinyxml_project | 2.3.0-beta (including) | 2.3.0-beta (including) |
| Tinyxml | Tinyxml_project | 2.3.1-beta (including) | 2.3.1-beta (including) |
| Tinyxml | Ubuntu | bionic | * |
| Tinyxml | Ubuntu | esm-apps/bionic | * |
| Tinyxml | Ubuntu | esm-apps/focal | * |
| Tinyxml | Ubuntu | esm-infra/xenial | * |
| Tinyxml | Ubuntu | focal | * |
| Tinyxml | Ubuntu | hirsute | * |
| Tinyxml | Ubuntu | impish | * |
| Tinyxml | Ubuntu | kinetic | * |
| Tinyxml | Ubuntu | trusty | * |
| Tinyxml | Ubuntu | xenial | * |