Denial Of Service (DoS)

libxml2.so is vulnerable to denial of service DoS. When ctxt-instate == XMLPARSEREOF, xmlParseStringEntityRef returns NULL , causing an infinite loop in the function xmlStringLenDecodeEntities in parser.c...