Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-6284
HistoryJan 12, 2008 - 12:00 a.m.

CVE-2007-6284

2008-01-1200:00:00
ubuntu.com
ubuntu.com
10

0.011 Low

EPSS

Percentile

84.6%

The xmlCurrentChar function in libxml2 before 2.6.31 allows
context-dependent attackers to cause a denial of service (infinite loop)
via XML containing invalid UTF-8 sequences.

Notes

Author Note
jdstrand private reproducer and patch on vendor-sec. DoS, but widely used
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlibxml2<Β 2.6.24.dfsg-1ubuntu1.1UNKNOWN
ubuntu6.10noarchlibxml2<Β 2.6.26.dfsg-2ubuntu4.1UNKNOWN
ubuntu7.04noarchlibxml2<Β 2.6.27.dfsg-1ubuntu3.1UNKNOWN
ubuntu7.10noarchlibxml2<Β 2.6.30.dfsg-2ubuntu1.1UNKNOWN