CVE:CVE-2017-9233
CNNVD:CNNVD-201705-1295
libexpat是美国软件开发者吉姆-克拉克所研发的一个使用C语言编写的XML解析器库。
libexpat 2.2.0及之前的版本中存在外部实体注入漏洞。远程攻击者可利用该漏洞造成拒绝服务（无限循坏）。
solution:Upgrade libexpat_project libexpat to a higher version than 2.2.0,and avoid the version (,2.2.0]; Upgrade python python to a higher version than 2.7.15,3.3.7,3.4.7,3.5.4,3.6.2,and avoid the version [2.7.0,2.7.15),[3.3.0,3.3.7),[3.4.0,3.4.7),[3.5.0,3.5.4),[3.6.0,3.6.2); Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0