Lucene search

Veracode Vulnerability DatabaseVERACODE:25270

HistoryMay 10, 2020 - 11:23 p.m.

Denial Of Service (DoS)

2020-05-1023:23:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

73.2%

JSON

libxml2 is vulnerable to denial of service (DoS). The vulnerability exists when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states “I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser.”

CPENameOperatorVersion
libxml2:3.3eq2.9.4-r2
libxml2:stretcheq2.9.4+dfsg1-2.2+deb9u2
libxml2:3.3eq2.9.4-r2
libxml2:stretcheq2.9.4+dfsg1-2.2+deb9u2

Name	Operator	Version
libxml2:3.3	eq	2.9.4-r2
libxml2:stretch	eq	2.9.4+dfsg1-2.2+deb9u2
libxml2:3.3	eq	2.9.4-r2
libxml2:stretch	eq	2.9.4+dfsg1-2.2+deb9u2

References

www.openwall.com/lists/oss-security/2016/11/05/3

www.openwall.com/lists/oss-security/2017/02/13/1

www.securityfocus.com/bid/96188

bugzilla.gnome.org/show_bug.cgi?id=778519

lists.debian.org/debian-lts-announce/2022/04/msg00004.html

security.gentoo.org/glsa/201711-01

0.004 Low

EPSS

Percentile

73.2%

JSON

Related for VERACODE:25270