CVE:CVE-2018-20843
CNNVD:CNNVD-201906-908
libexpat是一款使用C语言编写的流式XML解析器。
libexpat 2.2.7之前版本中的libexpat存在代码问题漏洞。攻击者可借助XML名称中带有大量冒号的XML输入利用该漏洞造成拒绝服务（消耗大量RAM及CPU资源）。
solution:Upgrade libexpat_project libexpat to a higher version than 2.2.7,and avoid the version (,2.2.7); Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,18.10,19.04,and avoid the version 12.04,14.04,16.04,18.04,18.10,19.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1; Upgrade oracle hospitality_res_3700 to a higher version than 5.7.6,and avoid the version [5.7,5.7.6]; Upgrade oracle http_server to a higher version than 12.1.3.0,12.2.1.4.0,and avoid the version 12.1.3.0,12.2.1.4.0; Upgrade oracle outside_in_technology to a higher version than 8.5.4,8.5.5,and avoid the version 8.5.4,8.5.5; Upgrade tenable nessus to a higher version than 8.15.0,and avoid the version (,8.15.0)