libtinyxml.so is vulnerable to Denial Of Service (DoS). The vulnerability arises due to a reachable assertion in tinyxmlparser.cp
p. An attacker can potentially crash the application via a crafted XML document with a \0
located after a whitespace.
CPE | Name | Operator | Version |
---|---|---|---|
libtinyxml.so | le | 2.6.2 | |
libtinyxml.so | le | 2.6.2 |
bugzilla.suse.com/show_bug.cgi?id=1218040
lists.debian.org/debian-lts-announce/2023/12/msg00024.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QCR5PIOBGDIDS6SYRESTMDJSEDFSCOE/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HOMBSHRIW5Q34SQSXYURYAOYDZD2NQF6/
sourceforge.net/p/tinyxml/git/ci/master/tree/tinyxmlparser.cpp
www.forescout.com/resources/sierra21-vulnerabilities