Lucene search

K
cloudlinuxCloudLinuxCLSA-2024:1708639232
HistoryFeb 22, 2024 - 10:00 p.m.

libxml2: Fix of CVE-2024-25062

2024-02-2222:00:35
repo.cloudlinux.com
12
libxml2
cve-2024-25062
fix
xmlvalidatepopelement
use-after-free
xml reader
dtd validation
xinclude expansion
test suite
unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

17.0%

  • CVE-2024-25062: Fix xmlValidatePopElement use-after-free in XML Reader
    interface with DTD validation and XInclude expansion enabled
  • test suite was partially activated

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

17.0%