CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
Low
EPSS
Percentile
91.5%
Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document.
Vendor | Product | Version | CPE |
---|---|---|---|
mark_pilgrim | feedparser | * | cpe:2.3:a:mark_pilgrim:feedparser:*:*:*:*:*:*:*:* |
mark_pilgrim | feedparser | 3.0 | cpe:2.3:a:mark_pilgrim:feedparser:3.0:*:*:*:*:*:*:* |
mark_pilgrim | feedparser | 3.0.1 | cpe:2.3:a:mark_pilgrim:feedparser:3.0.1:*:*:*:*:*:*:* |
mark_pilgrim | feedparser | 3.1 | cpe:2.3:a:mark_pilgrim:feedparser:3.1:*:*:*:*:*:*:* |
mark_pilgrim | feedparser | 3.2 | cpe:2.3:a:mark_pilgrim:feedparser:3.2:*:*:*:*:*:*:* |
mark_pilgrim | feedparser | 3.3 | cpe:2.3:a:mark_pilgrim:feedparser:3.3:*:*:*:*:*:*:* |
mark_pilgrim | feedparser | 4.0 | cpe:2.3:a:mark_pilgrim:feedparser:4.0:*:*:*:*:*:*:* |
mark_pilgrim | feedparser | 4.0.1 | cpe:2.3:a:mark_pilgrim:feedparser:4.0.1:*:*:*:*:*:*:* |
mark_pilgrim | feedparser | 4.0.2 | cpe:2.3:a:mark_pilgrim:feedparser:4.0.2:*:*:*:*:*:*:* |
mark_pilgrim | feedparser | 4.1 | cpe:2.3:a:mark_pilgrim:feedparser:4.1:*:*:*:*:*:*:* |
freecode.com/projects/feedparser/releases/344371
osvdb.org/81701
secunia.com/advisories/49256
www.mandriva.com/security/advisories?name=MDVSA-2013:118
www.securityfocus.com/bid/53654
code.google.com/p/feedparser/source/browse/trunk/NEWS?spec=svn706&r=706
code.google.com/p/feedparser/source/detail?r=703&path=/trunk/feedparser/feedparser.py
wiki.mageia.org/en/Support/Advisories/MGASA-2012-0157