The vulnerability of the entityValueInitProcessor function in the libexpat XML analysis library allows a attacker to cause a service failure.

The entityValueInitProcessor function in the libexpat library for XML file analysis has a vulnerability due to an incorrect restriction on XML references to external DTD objects. Exploiting this vulnerability could allow a malicious actor to cause a denial-of-service attack infinite loop during t...