Back | Slakfinder Home
Description:
| defusedxml (XML bomb protection for Python stdlib modules)
|
| The results of an attack on a vulnerable XML library can be fairly
| dramatic. With just a few hundred Bytes of XML data an attacker can
| occupy several Gigabytes of memory within seconds. An attacker can
| also keep CPUs busy for a long time with a small to medium size
| request. Under some circumstances it is even possible to access local
| files on your server, to circumvent a firewall, or to abuse services
| to rebound attacks to third parties. This library allows for XML to
| be parsed in a manner that avoids these pitfalls.
|
|
The slakfinder is created by zerouno@slacky.it.
To report a bug on this modified instance at slackware.nl/slakfinder, mail to alien@slackware.com. Thanks.