Security Advisory

CVE-2021-40439

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-10-07 15:50:12

Last updated 2024-08-04 02:44:10

Assigner apache

State PUBLISHED

Description

Apache OpenOffice has a dependency on expat software. Versions prior to 2.1.0 were subject to CVE-2013-0340 a "Billion Laughs" entity expansion denial of service attack and exploit via crafted XML files. ODF files consist of a set of XML files. All versions of Apache OpenOffice up to 4.1.10 are subject to this issue. expat in version 4.1.11 is patched.

← Browse all CVEs View on cve.org ↗