Ubuntu.comUB:CVE-2017-5969CVE-2017-5969
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:N/A:P
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
0.004 Low
EPSS
Percentile
73.2%
DISPUTED libxml2 2.9.4, when used in recover mode, allows remote
attackers to cause a denial of service (NULL pointer dereference) via a
crafted XML document. NOTE: The maintainer states “I would disagree of a
CVE with the Recover parsing option which should only be used for manual
recovery at least for XML parser.”
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=855001>
- <https://bugzilla.gnome.org/show_bug.cgi?id=778519>
- <https://bugzilla.gnome.org/show_bug.cgi?id=758422>
Notes
| Author | Note |
|---|---|
| mdeslaur | issue in recovery mode only, we will not be fixing this in stable releases |
Related
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:N/A:P
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
0.004 Low
EPSS
Percentile
73.2%