cve/2014/CVE-2014-3660.md

CVE-2014-3660

Description

parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the "billion laughs" attack.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Github

• https://github.com/hackerhouse-opensource/exploits
• https://github.com/projectivetech/nokogiri-strdup-segfault-mwe