CVE-2016-9180

CRITICAL9.1

perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig does not work

Published Dec 22, 2016

Modified 1 years ago

No fix available

Details

perl-XML-Twig: The option to expand_external_ents, documented as controlling external entity expansion in XML::Twig does not work. External entities are always expanded, regardless of the option's setting.

References

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2020-08/msg00020.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2020-08/msg00033.html WEBhttp://www.openwall.com/lists/oss-security/2016/11/04/2 WEBhttp://www.securityfocus.com/bid/94219 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2016-9180

CVSS Analysis

CVSS v3.0

9.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

HighA:H

9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Ecosystems

Timeline

PublishedDec 22, 2016

ModifiedAug 6, 2024