F5-K000138957

First published: Wed Mar 20 2024(Updated: )

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/last-modified-date
• agent/references
• agent/severity
• agent/type
• agent/description
• agent/first-publish-date
• collector/f5-advisory
• source/F5
• alias/CVE-2023-39615
• agent/software-canonical-lookup
• agent/software-canonical-lookup-request
• agent/softwarecombine
• agent/tags
• agent/event
• vendor/f5
• canonical/f5 traffix sdc
• version/f5 traffix sdc/5.1.0