CVE-2024-34459

2024-05-1415:39:11

Debian Security Bug Tracker

security-tracker.debian.org

xmllint

libxml2

buffer over-read

7.5 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

OSVersionArchitecturePackageVersionFilename
Debian12alllibxml2<= 2.9.14+dfsg-1.3~deb12u1libxml2_2.9.14+dfsg-1.3~deb12u1_all.deb
Debian11alllibxml2<= 2.9.10+dfsg-6.7+deb11u4libxml2_2.9.10+dfsg-6.7+deb11u4_all.deb
Debian10alllibxml2<= 2.9.4+dfsg1-7+deb10u4libxml2_2.9.4+dfsg1-7+deb10u4_all.deb
Debian999alllibxml2< 2.12.7+dfsg-1libxml2_2.12.7+dfsg-1_all.deb
Debian13alllibxml2<= 2.9.14+dfsg-1.3libxml2_2.9.14+dfsg-1.3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libxml2	<= 2.9.14+dfsg-1.3~deb12u1	libxml2_2.9.14+dfsg-1.3~deb12u1_all.deb
Debian	11	all	libxml2	<= 2.9.10+dfsg-6.7+deb11u4	libxml2_2.9.10+dfsg-6.7+deb11u4_all.deb
Debian	10	all	libxml2	<= 2.9.4+dfsg1-7+deb10u4	libxml2_2.9.4+dfsg1-7+deb10u4_all.deb
Debian	999	all	libxml2	< 2.12.7+dfsg-1	libxml2_2.12.7+dfsg-1_all.deb
Debian	13	all	libxml2	<= 2.9.14+dfsg-1.3	libxml2_2.9.14+dfsg-1.3_all.deb