Lucene search

K

Veracode Vulnerability DatabaseVERACODE:25270

HistoryMay 10, 2020 - 11:23 p.m.

Denial Of Service (DoS)

2020-05-1023:23:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

15

EPSS

0.005

Percentile

77.6%

libxml2 is vulnerable to denial of service (DoS). The vulnerability exists when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states “I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser.”

References

www.openwall.com/lists/oss-security/2016/11/05/3

www.openwall.com/lists/oss-security/2017/02/13/1

www.securityfocus.com/bid/96188

bugzilla.gnome.org/show_bug.cgi?id=778519

lists.debian.org/debian-lts-announce/2022/04/msg00004.html

security.gentoo.org/glsa/201711-01

EPSS

0.005

Percentile

77.6%

Related for VERACODE:25270

ubuntucve1 debiancve1 ibm7 hackerone1 prion1 veracode1 nvd1 alpinelinux1 cve1 nessus21 cvelist1 redhatcve1 openvas11 photon2 debian1 osv2 gentoo1 altlinux2 mageia1 suse1 apple2 tenable1