CVE ID:	CVE-2013-0338
Description:	libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity.
Test IDs:	1.3.6.1.4.1.25623.1.0.123687   1.3.6.1.4.1.25623.1.0.120136   1.3.6.1.4.1.25623.1.0.881647   1.3.6.1.4.1.25623.1.1.4.2013.0744.1   1.3.6.1.4.1.25623.1.1.4.2013.0743.1   1.3.6.1.4.1.25623.1.0.881617   1.3.6.1.4.1.25623.1.0.870946   1.3.6.1.4.1.25623.1.1.4.2013.1625.1   1.3.6.1.4.1.25623.1.0.841380   1.3.6.1.4.1.25623.1.1.4.2013.1627.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0338 52662 http://secunia.com/advisories/52662 55568 http://secunia.com/advisories/55568 DSA-2652 http://www.debian.org/security/2013/dsa-2652 HPSBGN03302 http://marc.info/?l=bugtraq&m=142798889927587&w=2 MDVSA-2013:056 http://www.mandriva.com/security/advisories?name=MDVSA-2013:056 SSRT101996 http://marc.info/?l=bugtraq&m=142798889927587&w=2 SUSE-SU-2013:1627 http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html USN-1782-1 http://www.ubuntu.com/usn/USN-1782-1 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html https://bugzilla.redhat.com/show_bug.cgi?id=912400 https://bugzilla.redhat.com/show_bug.cgi?id=912400 https://git.gnome.org/browse/libxml2/commit/?id=23f05e0c33987d6605387b300c4be5da2120a7ab https://git.gnome.org/browse/libxml2/commit/?id=23f05e0c33987d6605387b300c4be5da2120a7ab openSUSE-SU-2013:0552 http://lists.opensuse.org/opensuse-updates/2013-03/msg00112.html openSUSE-SU-2013:0555 http://lists.opensuse.org/opensuse-updates/2013-03/msg00114.html