CVE-2017-9233
XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.
- CVSS 3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- 8.7% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-25)
- CWEs
- CWE-611, CWE-835
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- libexpat_project:libexpat
- python:python