Buffer Over-read

2024-05-1406:30:26

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

buffer over-read

xml vulnerability

command injection

denial of service

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

libxml2.so is vulnerable to Buffer over-read. The vulnerability is due to the xmllint --htmlout command in the xmlHTMLPrintFileContext function within xmllint.c, allowing an attacker to potentially access sensitive information, cause a denial of service or execute arbitrary code.

CPENameOperatorVersion
libxml2.sole2.12.6
libxml2.sole2.11.7
libxml2:sideq2.9.10+dfsg-6.2
libxml2.sole2.12.6
libxml2.sole2.11.7
libxml2:sideq2.9.10+dfsg-6.2
libxml2:3.18eq2.11.2-r0
libxml2:3.18eq2.11.7-r0
libxml2:3.18eq2.11.3-r0
libxml2:3.18eq2.10.4-r2

Name	Operator	Version
libxml2.so	le	2.12.6
libxml2.so	le	2.11.7
libxml2:sid	eq	2.9.10+dfsg-6.2
libxml2.so	le	2.12.6
libxml2.so	le	2.11.7
libxml2:sid	eq	2.9.10+dfsg-6.2
libxml2:3.18	eq	2.11.2-r0
libxml2:3.18	eq	2.11.7-r0
libxml2:3.18	eq	2.11.3-r0
libxml2:3.18	eq	2.10.4-r2