Exponential Entity Expansion (Billion Laughs Attack)
- Risk:
Medium
- Type:
- Active
- CWE:
- CWE-776
- Summary
An exponential entity expansion, or “billion laughs” attack is a type of denial-of-service (DoS) attack. It is aimed at parsers of markup languages like XML or YAML that allow macro expansions.
- Solution
Defenses against this kind of attack include capping the memory allocated in an individual parser if loss of the document is acceptable, or treating entities symbolically and expanding them lazily only when (and to the extent) their content is to be used.
Free security scan for your website