Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2009-2473
HistoryAug 21, 2009 - 5:00 p.m.

CVE-2009-2473

2009-08-2117:00:00
redhat
www.cve.org
7

AI Score

6.8

Confidence

High

EPSS

0.004

Percentile

72.7%

JSON

neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

Related

veracode 1
ubuntucve 12
nvd 28
cve 28
prion 27
debiancve 10
openvas 27
nessus 18
securityvulns 2
cvelist 27
altlinux 2
fedora 2
exploitdb 1
redhat 2
seebug 1
oraclelinux 2
centos 2
github 2
osv 3
redhatcve 1
freebsd 1
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:53:01
ubuntucve
ubuntucve
CVE-2009-2473
2009-08-21 00:00:00
CVE-2003-1564
2003-12-31 00:00:00
CVE-2014-5265
2014-08-18 00:00:00
nvd
nvd
CVE-2009-2473
2009-08-21 17:30:00
CVE-2003-1564
2003-12-31 05:00:00
CVE-2011-2188
2011-06-21 02:52:43
cve
cve
CVE-2009-2473
2009-08-21 17:30:00
CVE-2003-1564
2008-09-02 14:00:00
CVE-2011-1753
2011-06-21 02:52:42
prion
prion
Code injection
2009-08-21 17:30:00
Code injection
2011-06-21 02:52:00
Design/Logic Flaw
2014-02-26 14:55:00
debiancve
debiancve
CVE-2009-2473
2009-08-21 17:30:00
CVE-2011-2188
2011-06-21 02:52:43
CVE-2011-1756
2011-06-21 02:52:43
openvas
openvas
Mandrake Security Advisory MDVSA-2009:221 (libneon0.27)
2009-09-02 00:00:00
Mandrake Security Advisory MDVSA-2009:221 (libneon0.27)
2009-09-02 00:00:00
RedHat Update for gnome-vfs2 RHSA-2013:0131-01
2013-01-11 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : libneon0.27 (MDVSA-2009:221)
2009-08-25 00:00:00
RHEL 5 : gnome-vfs2 (RHSA-2013:0131)
2013-01-08 00:00:00
CentOS 5 : gnome-vfs2 (CESA-2013:0131)
2013-01-17 00:00:00
securityvulns
securityvulns
[ MDVSA-2009:221 ] libneon0.27
2009-08-25 00:00:00
libneon certificate spoofing
2009-08-25 00:00:00
cvelist
cvelist
CVE-2003-1564
2008-09-02 14:00:00
CVE-2011-1757
2022-10-03 16:15:11
CVE-2014-5265
2014-08-18 10:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package gnome-vfs version 1:2.24.3-alt2
2010-09-27 00:00:00
Security fix for the ALT Linux 5 package gnome-vfs version 1:2.24.4-alt0.M50P.1
2010-11-13 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: neon-0.28.6-1.fc11
2009-08-20 21:03:23
[SECURITY] Fedora 10 Update: neon-0.28.6-1.fc10
2009-08-20 20:59:38
exploitdb
exploitdb
Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service
2009-11-12 00:00:00
redhat
redhat
(RHSA-2013:0131) Low: gnome-vfs2 security and bug fix update
2013-01-08 00:00:00
(RHSA-2008:0886) Important: libxml2 security update
2008-09-11 00:00:00
seebug
seebug
Neon XML文档解析拒绝服务漏洞
2009-08-26 00:00:00
oraclelinux
oraclelinux
gnome-vfs2 security and bug fix update
2013-01-11 00:00:00
neon security update
2009-09-21 00:00:00
centos
centos
gnome security update
2013-01-09 19:45:49
libxml2 security update
2008-09-12 01:23:56
github
github
SnakeYAML Entity Expansion during load operation
2021-06-04 21:37:45
JBossWS vulnerable to uncontrolled recursion
2022-05-13 01:39:29
osv
osv
JBossWS vulnerable to uncontrolled recursion
2022-05-13 01:39:29
CVE-2017-18640
2019-12-12 03:15:10
SnakeYAML Entity Expansion during load operation
2021-06-04 21:37:45
redhatcve
redhatcve
CVE-2017-18640
2020-04-08 21:02:33
freebsd
freebsd
ejabberd -- remote denial of service vulnerability
2011-04-27 00:00:00

AI Score

6.8

Confidence

High

EPSS

0.004

Percentile

72.7%

JSON
Related for CVELIST:CVE-2009-2473
veracode1ubuntucve12nvd28cve28prion27debiancve10openvas27nessus18securityvulns2cvelist27altlinux2fedora2exploitdb1redhat2seebug1oraclelinux2centos2github2osv3redhatcve1freebsd1