CVE-2023-52426: Medium severity ibm cognos dashboards vulnerability
libexpat is vulnerable to a denial of service, caused by an XML entity expansion flaw if XMLDTD is undefined at compile time. By compiling specially crafted XML input, a local attacker could exploit this vulnerability to cause a denial of service.
Other sources
libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52426?
CVE-2023-52426 has a severity rating that indicates a significant denial of service risk.
How do I fix CVE-2023-52426?
To mitigate CVE-2023-52426, compile libexpat with XML_DTD defined and apply any available patches.
Which software is affected by CVE-2023-52426?
CVE-2023-52426 affects libexpat versions up to 2.5.0 and certain versions of IBM Cognos Dashboards on Cloud Pak for Data.
What type of vulnerability is CVE-2023-52426?
CVE-2023-52426 is a denial of service vulnerability caused by an XML entity expansion flaw.
Who can exploit CVE-2023-52426?
A local attacker could potentially exploit CVE-2023-52426 by crafting specially designed XML input.