CERT24RHSA-2020:1827: libxml2 vulnerabilities enable denial-of-service attacksLoading data…
CERT24Threat Observatory
Period

RHSA-2020:1827: libxml2 vulnerabilities enable denial-of-service attacks

The source describes two libxml2 vulnerabilities that can cause denial of service. In libxml2 2.9.8, the xz_decomp function can enter an infinite loop when an XML file triggers LZMA_MEMLIMIT_ERROR. In addition, processing an invalid XPath expression can cause a null pointer dereference and application crash.

← Back to intelligence

RHSA-2020:1827: libxml2 vulnerabilities enable denial-of-service attacks

The source describes two libxml2 vulnerabilities that can cause denial of service. In libxml2 2.9.8, the xz_decomp function can enter an infinite loop when an XML file triggers LZMA_MEMLIMIT_ERROR. In addition, processing an invalid XPath expression can cause a null pointer dereference and application crash.