← Database

CVE-2022-44641

MEDIUM CVSS: 6.5 Published: 2022-11-18 Modified: 2026-06-17

Description

In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLRPC requests that cause a recursive XML entity expansion, leading to excessive use of memory on the server and a Denial of Service.

Affected Platforms

Debian Debian LinuxLinaro Lava

Weakness Type

CWE-776, CWE-776

References