REDHAT-BUG-2429959: Medium severity libxml2 vulnerability
Uncontrolled recursion vulnerability in the xmlCatalogXMLResolveURI function of the libxml2 XML parsing library. The issue occurs when an XML catalog contains a delegate URI entry that references the catalog itself. During entity resolution, the function recursively resolves the same catalog entry without detecting the cyclic reference. This results in infinite recursion and eventual call stack exhaustion, leading to a segmentation fault. Exploitation is configuration-dependent and primarily impacts availability by allowing an attacker to crash affected applications.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2429959?
The severity of REDHAT-BUG-2429959 is high due to potential impacts from uncontrolled recursion in XML parsing.
How do I fix REDHAT-BUG-2429959?
To fix REDHAT-BUG-2429959, update to the latest version of the libxml2 library that addresses this vulnerability.
What is the impact of REDHAT-BUG-2429959?
The impact of REDHAT-BUG-2429959 includes potential denial of service caused by excessive resource consumption during XML processing.
Which versions of libxml2 are affected by REDHAT-BUG-2429959?
Affected versions of libxml2 include all versions prior to the fix addressing REDHAT-BUG-2429959.
Is REDHAT-BUG-2429959 a known vulnerability?
Yes, REDHAT-BUG-2429959 is a known vulnerability documented in Red Hat's bug tracking system.