First published: Tue May 03 2016(Updated: )
It is possible to trigger a stack overflow using a carefully crafted invalid xml file, the stack overflow occurs before libxml2 determines the xml file is invalid. Upstream bug: <a href="https://bugzilla.gnome.org/show_bug.cgi?id=765207">https://bugzilla.gnome.org/show_bug.cgi?id=765207</a>
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/libxml2 | <0:2.7.6-21.el6_8.1 | 0:2.7.6-21.el6_8.1 |
redhat/libxml2 | <0:2.9.1-6.el7_2.3 | 0:2.9.1-6.el7_2.3 |
Canonical Ubuntu Linux | =12.04 | |
Canonical Ubuntu Linux | =14.04 | |
Canonical Ubuntu Linux | =15.10 | |
Canonical Ubuntu Linux | =16.04 | |
Xmlsoft Libxml2 | =2.9.3 | |
Debian Debian Linux | =8.0 | |
Hp Icewall Federation Agent | =3.0 | |
Hp Icewall File Manager | =3.0 | |
openSUSE Leap | =42.1 | |
debian/libxml2 | 2.9.4+dfsg1-7+deb10u4 2.9.4+dfsg1-7+deb10u6 2.9.10+dfsg-6.7+deb11u4 2.9.14+dfsg-1.3~deb12u1 2.9.14+dfsg-1.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.