libexpat Denial-of-Service Vulnerability Due to Attribute Name Collision Checks

A denial-of-service vulnerability has been identified in libexpat versions prior to 2.8.1. The issue arises from the computational complexity involved in checking for collisions in attribute names, which can be exploited using moderately sized crafted XML input.

Impact

Exploitation of this vulnerability leads to the denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users can upgrade to libexpat version 2.8.1 or later to address this vulnerability.