CVE-2016-5300

Name of the Vulnerable Software and Affected Versions Expat (affected versions not specified)

Description The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document. This issue exists because of an incomplete fix for a previous vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.