REDHAT-BUG-2429975: Low severity redhat/libxml2 vulnerability
Uncontrolled resource consumption vulnerability in the XML catalog processing logic of the libxml2 library. The issue arises when handling chains of XML catalogs that contain repeated <nextCatalog> elements pointing to the same downstream catalog. During entity resolution, the parser redundantly traverses catalog chains, causing exponential growth in processing time as depth increases. This can be exploited by supplying crafted catalogs to cause excessive CPU consumption and degrade application availability, resulting in a denial-of-service condition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2429975?
The severity of REDHAT-BUG-2429975 is classified as a medium-level vulnerability due to its potential to consume excessive resources.
How do I fix REDHAT-BUG-2429975?
To fix REDHAT-BUG-2429975, users should upgrade to the latest version of the libxml2 library that addresses this resource consumption vulnerability.
What software is affected by REDHAT-BUG-2429975?
REDHAT-BUG-2429975 affects the libxml2 library specifically in the Red Hat environment.
What type of vulnerability is REDHAT-BUG-2429975?
REDHAT-BUG-2429975 is an uncontrolled resource consumption vulnerability linked to XML catalog processing.
How does REDHAT-BUG-2429975 impact system performance?
REDHAT-BUG-2429975 can significantly impact system performance by causing excessive resource usage during entity resolution in XML catalogs.