REDHAT-BUG-2372373: Use After Free
A Heap Use After Free (UAF) vulnerability was discovered in the Schematron in the libxml2. The issue arises in the xmlSchematronGetNode function when processing XPath expressions in Schematron schema elements <sch:name path="..."/>, where a pointer to freed memory is returned and then accessed, leading to undefined behavior and potential crashes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2372373?
The severity of REDHAT-BUG-2372373 is considered high due to the potential for exploitation via a Heap Use After Free vulnerability.
How do I fix REDHAT-BUG-2372373?
To fix REDHAT-BUG-2372373, update your libxml2 package to the latest version that addresses this vulnerability.
What systems are affected by REDHAT-BUG-2372373?
REDHAT-BUG-2372373 affects systems utilizing the GNOME libxml2 library.
Can REDHAT-BUG-2372373 be exploited remotely?
Yes, REDHAT-BUG-2372373 can potentially be exploited remotely through maliciously crafted Schematron schema elements.
What impact does REDHAT-BUG-2372373 have on applications?
Applications utilizing the vulnerable version of libxml2 may face crashes or unexpected behavior due to memory corruption.