CVE-2024-34459

2024-05-1400:00:00

ubuntu.com

xmllint

formatting error

buffer over-read

libxml2

htmlout

debian bug

gnome issue

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x
before 2.12.7. Formatting error messages with xmllint --htmlout can result
in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

Bugs

Notes

Author	Note
	Priority reason: just a crash in a command line tool
mdeslaur	this is just a crash via OOB read in a the command-line xmllint tool, there is very little security impact here

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlibxml2< anyUNKNOWN
ubuntu20.04noarchlibxml2< anyUNKNOWN
ubuntu22.04noarchlibxml2< anyUNKNOWN
ubuntu23.10noarchlibxml2< anyUNKNOWN
ubuntu24.04noarchlibxml2< anyUNKNOWN
ubuntu14.04noarchlibxml2< anyUNKNOWN
ubuntu16.04noarchlibxml2< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	libxml2	< any	UNKNOWN
ubuntu	20.04	noarch	libxml2	< any	UNKNOWN
ubuntu	22.04	noarch	libxml2	< any	UNKNOWN
ubuntu	23.10	noarch	libxml2	< any	UNKNOWN
ubuntu	24.04	noarch	libxml2	< any	UNKNOWN
ubuntu	14.04	noarch	libxml2	< any	UNKNOWN
ubuntu	16.04	noarch	libxml2	< any	UNKNOWN