CVE-2021-42260
EUVD-2021-2923611.10.2021, 20:15
TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| tinyxml_project | tinyxml | 2.3.2 ≤ 𝑥 ≤ 2.6.2 |
| tinyxml_project | tinyxml | 2.3.0:beta |
| tinyxml_project | tinyxml | 2.3.1:beta |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References