Lucene search

K
redhatcveRedhat.comRH:CVE-2018-14404
HistoryOct 19, 2019 - 6:58 p.m.

CVE-2018-14404

2019-10-1918:58:27
redhat.com
access.redhat.com
10

0.03 Low

EPSS

Percentile

90.9%

A null pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 when parsing invalid XPath expression. Applications processing untrusted XSL format inputs with the use of libxml2 library may be vulnerable to denial of service attack due to crash of the application.