Denial Of Service (DoS)

2019-05-0204:52:18

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

JSON

libxml2 is vulnerable to denial of service. Two heap-based buffer overflow flaws were found in the way libxml2 decoded certain XML files. A remote attacker could provide a specially-crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.

CPENameOperatorVersion
mingw32-libxml2eq2.7.6__3.el6
mingw32-libxml2eq2.7.6__2.el6
libxml2eq2.6.26__2.1.2.8.el5_5.1
libxml2eq2.7.6__1.el6
mingw32-libxml2eq2.7.6__3.el6
mingw32-libxml2eq2.7.6__2.el6
libxml2eq2.6.26__2.1.2.8.el5_5.1
libxml2eq2.7.6__1.el6

Name	Operator	Version
mingw32-libxml2	eq	2.7.6__3.el6
mingw32-libxml2	eq	2.7.6__2.el6
libxml2	eq	2.6.26__2.1.2.8.el5_5.1
libxml2	eq	2.7.6__1.el6
mingw32-libxml2	eq	2.7.6__3.el6
mingw32-libxml2	eq	2.7.6__2.el6
libxml2	eq	2.6.26__2.1.2.8.el5_5.1
libxml2	eq	2.7.6__1.el6