REDHAT-BUG-1319829: Medium severity libxml2 vulnerability
A vulnerability was found in a way libxml2 parses certain files. With the libxml2 in recovery mode, a maliciously crafted filed could cause libxml2 to crash.
References:
http://seclists.org/oss-sec/2016/q1/682
CVE assignment:
http://seclists.org/oss-sec/2016/q1/683
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1319829?
The severity of REDHAT-BUG-1319829 is classified as critical due to the potential for denial-of-service caused by a crash.
How does REDHAT-BUG-1319829 affect libxml2?
REDHAT-BUG-1319829 affects libxml2 by allowing a maliciously crafted file to cause a crash while in recovery mode.
How do I fix REDHAT-BUG-1319829?
To fix REDHAT-BUG-1319829, update libxml2 to the latest patched version provided by your distribution.
Who is affected by REDHAT-BUG-1319829?
Users and applications relying on the libxml2 library are affected by REDHAT-BUG-1319829 if they process untrusted XML data.
What is the impact of not addressing REDHAT-BUG-1319829?
Not addressing REDHAT-BUG-1319829 may leave systems vulnerable to crashes and potential denial-of-service attacks.