NetSight
IP …
medium6.5

CVE-2022-44641

In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLRPC requests that cause a recursive XML e…

Impact

In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLRPC requests that cause a recursive XML entity expansion, leading to excessive use of memory on the server and a Denial of Service.

Affected products

VendorProductAffected versions
LinaroLava
before 2022.11
DebianDebian Linux
Versions 10.0, 11.0

Weakness classification

CWE-776

References