When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs.
7.1.1+dfsg-17.2.0+dfsg-17.3.0+dfsg-17.3.0+dfsg-1ubuntu27.3.0+dfsg-1ubuntu37.3.1+dfsg-47.3.1+dfsg-4ubuntu0.13.10.12-1~22.04.163.12.3-1ubuntu0.157.3.19+dfsg-17.3.19+dfsg-27.3.20+dfsg-17.3.20+dfsg-33.13.3-13.13.3-23.13.3-43.13.4-13.13.5-13.13.5-23.13.6-13.13.7-13.13.7-1ubuntu0.13.13.7-1ubuntu0.2+2 more3.14.0-13.14.0-1ubuntu0.13.14.0-1ubuntu0.23.14.0-1ubuntu0.33.14.0~a7-0ubuntu13.14.0~b1-13.14.0~b3-13.14.0~rc1-13.14.0~rc2-13.14.0~rc3-12.7.6-8ubuntu0.6+esm303.4.3-1ubuntu1~14.04.7+esm213.5.2-2ubuntu0~16.04.4~14.04.1+esm112.7.12-1ubuntu0~16.04.18+esm22Exploitability
AV:NAC:LAT:PPR:LUI:NVulnerable System
VC:NVI:NVA:HSubsequent System
SC:NSI:NSA:NCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N