REDHAT-BUG-1338682: Medium severity libxml2 vulnerability
A vulnerability was found in the libxml2 library. A maliciously crafted file could cause the application to crash due to a heap-based out-of-bounds memory read.
References:
https://bugzilla.gnome.org/showbug.cgi?id=758606
Upstream fix:
https://git.gnome.org/browse/libxml2/commit/?id=0bcd05c5cd83dec3406c8f68b769b1d610c72f76
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1338682?
REDHAT-BUG-1338682 is considered a high severity vulnerability due to potential application crashes from malicious file input.
How do I fix REDHAT-BUG-1338682?
To mitigate REDHAT-BUG-1338682, update the libxml2 library to the latest patched version.
What type of vulnerability is REDHAT-BUG-1338682?
REDHAT-BUG-1338682 is a heap-based out-of-bounds memory read vulnerability in the libxml2 library.
Which software is affected by REDHAT-BUG-1338682?
REDHAT-BUG-1338682 affects applications that utilize the libxml2 library.
How can REDHAT-BUG-1338682 be exploited?
A maliciously crafted XML file can be used to exploit REDHAT-BUG-1338682, causing the application to crash.