REDHAT-BUG-1332820: Medium severity libxml2 vulnerability

Published May 4, 2016

Updated

A vulnerability was found in libxml2. Parsing a maliciously crafted xml file could cause the application to crash if recover mode is used.

References:

http://seclists.org/oss-sec/2016/q2/195

Affected Software

1 affected component

Gnome libxml2

May 4, 2016

Data Sourced

07:16 AM

DescriptionSeverityAffected Software

The severity of REDHAT-BUG-1332820 is classified as critical due to the potential for application crashes when parsing malicious XML files.

To fix REDHAT-BUG-1332820, update the libxml2 package to the latest version that addresses this vulnerability.

Users of the libxml2 library, particularly those using it in applications with recover mode enabled, are affected by REDHAT-BUG-1332820.

The issue in REDHAT-BUG-1332820 is caused by processing a specially crafted XML file that may lead to a crash when recover mode is employed.

As a workaround for REDHAT-BUG-1332820, avoid using recover mode when parsing XML files unless the library has been updated.