Lucene search

K
osvGoogleOSV:DSA-1666-1
HistoryNov 17, 2008 - 12:00 a.m.

libxml2 - several vulnerabilities

2008-11-1700:00:00
Google
osv.dev
11

0.019 Low

EPSS

Percentile

88.4%

Several vulnerabilities have been discovered in the GNOME XML library.
The Common Vulnerabilities and Exposures project identifies the
following problems:

  • CVE-2008-4225
    Drew Yao discovered that missing input sanitising in the
    xmlBufferResize() function may lead to an infinite loop,
    resulting in denial of service.
  • CVE-2008-4226
    Drew Yao discovered that an integer overflow in the
    xmlSAX2Characters() function may lead to denial of service or
    the execution of arbitrary code.

For the stable distribution (etch), these problems have been fixed in
version 2.6.27.dfsg-6.

For the upcoming stable distribution (lenny) and the unstable
distribution (sid), these problems have been fixed in
version 2.6.32.dfsg-5.

We recommend that you upgrade your libxml2 packages.