REDHAT-BUG-2235864: Buffer Overflow
Xmlsoft Libxml2 v2.11.0 was discovered to contain a global buffer overflow via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file.
https://gitlab.gnome.org/GNOME/libxml2/-/issues/535
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2235864?
The severity of REDHAT-BUG-2235864 is classified as critical due to the potential exploitation leading to Denial of Service.
How do I fix REDHAT-BUG-2235864?
To fix REDHAT-BUG-2235864, update to a patched version of Xmlsoft Libxml2 that addresses the global buffer overflow.
What could an attacker achieve by exploiting REDHAT-BUG-2235864?
By exploiting REDHAT-BUG-2235864, an attacker can cause Denial of Service by supplying a specially crafted XML file.
Which version of Xmlsoft Libxml2 is affected by REDHAT-BUG-2235864?
Xmlsoft Libxml2 version 2.11.0 is specifically affected by the vulnerability identified as REDHAT-BUG-2235864.
What function in Xmlsoft Libxml2 is responsible for the REDHAT-BUG-2235864 vulnerability?
The xmlSAX2StartElement() function in Xmlsoft Libxml2 is responsible for the vulnerability identified as REDHAT-BUG-2235864.