CVE-2017-9233

PoC —

CVSS 3.1

7.5 high

EPSS

9%p95

Published

Jul 25, 2017 (Jul 25, 2017)

Modified

Jun 17, 2026

Description

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

Vendors: libexpat project python debian
Products: libexpat, python, debian linux
Weakness: CWE-611, CWE-835
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (8.7%)

In the news0 stories

No ingested article mentions this CVE yet.