Search/CVE-2018-20843
● CVE — High

CVE-2018-20843

Vendordebian, fedoraproject, canonical, opensuse, oracleProductdebian linux, fedora, ubuntu linux, leap, http server, nessus, outside in technology, libexpat, hospitality res 3700DiscoveredJun 24, 2019UpdatedMay 30, 2025

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).

View graph Watch Export
CVSS v3.1
7.5 HIGH
EPSS
7.11%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Connections
10 relationships
Timeline
disclosure → media coverage
Jun 24, 2019
Disclosure — published as a CVE record. · last revised by NVD May 30, 2025