CVE-2013-0340

🗓️ 21 Jan 2014 18:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 661 Views

expat 2.1.0 and earlier vulnerable to XXE issue, allowing remote attackers to cause denial of service or access arbitrary file

Reporter	Title	Published	Views	Family All 162
FreeBSD	Python -- multiple vulnerabilities	30 Aug 202100:00	–	freebsd
FreeBSD	Python -- multiple vulnerabilities	30 Aug 202100:00	–	freebsd
FreeBSD	Python -- multiple vulnerabilities	30 Aug 202100:00	–	freebsd
FreeBSD	texproc/expat2 -- billion laugh attack	21 Feb 201300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2022-43680, CVE-2013-0340, CVE-2017-9233)	13 Dec 202205:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Prospect is affected by Expat XML Parser vulnerability (CVE-2013-0340)	17 Jun 201815:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to denial of service due to libexpat (CVE-2022-43680, CVE-2013-0340, CVE-2017-9233)	22 Nov 202215:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM HTTP Server used by IBM Rational ClearQuest (CVE-2022-43680, CVE-2013-0340, CVE-2017-9233)	2 Dec 202202:21	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several issues due to open source packages	19 Nov 202514:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues	27 Feb 202615:56	–	ibm

NVD

Node

libexpat_project libexpatRange<2.4.0

Node

python pythonRange3.6.0–3.6.15

python pythonRange3.7.0–3.7.12

python pythonRange3.8.0–3.8.12

python pythonRange3.9.0–3.9.7

Node

apple ipadosRange<14.8

apple iphone_osRange<14.8

apple macosRange<11.6

apple tvosRange<15.0

apple watchosRange<8.0

[
  {
    "collectionURL": "https://github.com/libexpat/libexpat/",
    "packageName": "libexpat",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.4.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
support	www.support.apple.com/kb/HT212805
securitytracker	www.securitytracker.com/id
seclists	www.seclists.org/fulldisclosure/2021/Sep/40
securityfocus	www.securityfocus.com/bid/58233
github	www.github.com/libexpat/libexpat/blob/R_2_4_1/expat/Changes
support	www.support.apple.com/kb/HT212814
seclists	www.seclists.org/fulldisclosure/2021/Oct/61
support	www.support.apple.com/kb/HT212815
openwall	www.openwall.com/lists/oss-security/2021/10/07/4
seclists	www.seclists.org/fulldisclosure/2021/Oct/63

29 Apr 2026 01:13Current

7.4High risk

Vulners AI Score7.4

CVSS 26.8

EPSS0.00058

CWE-611