Denial Of Service (DoS)

2019-05-0204:52:18

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.011 Low

EPSS

Percentile

84.4%

JSON

libxml2 is vulnerable to denial of service. Two heap-based buffer overflow flaws were found in the way libxml2 decoded certain XML files. A remote attacker could provide a specially-crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.

CPENameOperatorVersion
mingw32-libxml2eq2.7.6__3.el6
mingw32-libxml2eq2.7.6__2.el6
libxml2eq2.6.26__2.1.2.8.el5_5.1
libxml2eq2.7.6__1.el6
mingw32-libxml2eq2.7.6__3.el6
mingw32-libxml2eq2.7.6__2.el6
libxml2eq2.6.26__2.1.2.8.el5_5.1
libxml2eq2.7.6__1.el6

Name	Operator	Version
mingw32-libxml2	eq	2.7.6__3.el6
mingw32-libxml2	eq	2.7.6__2.el6
libxml2	eq	2.6.26__2.1.2.8.el5_5.1
libxml2	eq	2.7.6__1.el6
mingw32-libxml2	eq	2.7.6__3.el6
mingw32-libxml2	eq	2.7.6__2.el6
libxml2	eq	2.6.26__2.1.2.8.el5_5.1
libxml2	eq	2.7.6__1.el6