Unrated severityNVD Advisory· Published May 23, 2014· Updated Jun 16, 2026
CVE-2013-1864
CVE-2013-1864
Description
The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted PXML document containing a large number of nested entity references, aka a "billion laughs attack."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:opalvoip:portable_tool_library:2.10.1:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:opalvoip:portable_tool_library:2.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:opalvoip:portable_tool_library:2.10.2:*:*:*:*:*:*:*
- cpe:2.3:a:opalvoip:portable_tool_library:2.10.7:*:*:*:*:*:*:*
- cpe:2.3:a:opalvoip:portable_tool_library:2.10.9:*:*:*:*:*:*:*
- cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0:sp3:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
9- www.ekiga.org/news/2013-02-21/ekiga-4.0.1-stable-availablenvdPatchVendor Advisory
- sourceforge.net/p/opalvoip/code/28856nvdExploitPatch
- lists.fedoraproject.org/pipermail/package-announce/2013-March/099553.htmlnvd
- osvdb.org/91439nvd
- seclists.org/oss-sec/2013/q1/674nvd
- secunia.com/advisories/52659nvd
- www.securityfocus.com/bid/58520nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/82885nvd
- www.suse.com/support/update/announcement/2014/suse-su-20140237-1.htmlnvd
News mentions
0No linked articles in our index yet.