{"id":"CVE-2018-20843","revision":"e40f992c26584d41afbe44de7fd46d51","records":[{"revision":"e40f992c26584d41afbe44de7fd46d51","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2018-20843","aliases":[],"title":"In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service atta…","description":"In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).","state":0,"publishedAt":"2019-06-24T16:06:38+00:00","modifiedAt":"2026-10-14T06:30:43.493+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"n/a\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"n/a\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://usn.ubuntu.com/4040-1/","https://usn.ubuntu.com/4040-2/","https://www.debian.org/security/2019/dsa-4472","https://seclists.org/bugtraq/2019/Jun/39","https://lists.debian.org/debian-lts-announce/2019/06/msg00028.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CEJJSQSG3KSUQY4FPVHZ7ZTT7FORMFVD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IDAUGEB3TUP6NEKJDBUBZX7N5OAUOOOK/","http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00039.html","https://security.gentoo.org/glsa/201911-08","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/libexpat/libexpat/issues/186","https://github.com/libexpat/libexpat/pull/262","https://github.com/libexpat/libexpat/pull/262/commits/11f8838bf99ea0a6f0b76f9760c43704d00c4ff6","https://github.com/libexpat/libexpat/blob/R_2_2_7/expat/Changes","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5226","https://security.netapp.com/advisory/ntap-20190703-0001/","https://support.f5.com/csp/article/K51011533","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.tenable.com/security/tns-2021-11"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2018-20843","license":"CVE Program Terms of Use","key":"cve-program:CVE-2018-20843","identifiers":["CVE-2018-20843"]},"retained":false,"historicalAffected":[]}],"coverage":[]}